Static task
static1
Behavioral task
behavioral1
Sample
bbb89b0d648559ec3eb7565fd37b4b7b_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
bbb89b0d648559ec3eb7565fd37b4b7b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bbb89b0d648559ec3eb7565fd37b4b7b_JaffaCakes118
-
Size
593KB
-
MD5
bbb89b0d648559ec3eb7565fd37b4b7b
-
SHA1
9276db4952234a9fa3195f040f1bdfa67bc166dc
-
SHA256
c669747e7bce4b378199d9f22a82189a4e0154857853347ba8345b97b2e2e13e
-
SHA512
b9f8b8842f21a00bc60c1c10832d1e0c45a9c889e5e06a77a1444fce355598f2d786afc4f57fc9563e38b1a225878dd412f395dc0f4a8bac5d1f3eb61b892554
-
SSDEEP
12288:JfhRToCzj8Q0L0yVXZKPGFbOgUNZ4pqENMPEUvRMI5aEXS:JfnTbnyVJKc6vNruMVvqI5d
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bbb89b0d648559ec3eb7565fd37b4b7b_JaffaCakes118
Files
-
bbb89b0d648559ec3eb7565fd37b4b7b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.nsp0 Size: - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 531KB - Virtual size: 536KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: 61KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE