Static task
static1
Behavioral task
behavioral1
Sample
bbba35ba953cc34cdd7cc02e98840620_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
bbba35ba953cc34cdd7cc02e98840620_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bbba35ba953cc34cdd7cc02e98840620_JaffaCakes118
-
Size
1.5MB
-
MD5
bbba35ba953cc34cdd7cc02e98840620
-
SHA1
93a2f0ca10090885de6153ddeb9a53aefe709e7d
-
SHA256
dc01ec0044bf0eeec3013a2cd7d8828df41e0b4032f0fe56d878b5218fd40ca2
-
SHA512
9df05626338a118cda0a77035ddc4c4bfa7eefe6386daf4794334be0a93666ef08440d415347051a42b76defd3da222924f811489e6aad317e05f65977cbff34
-
SSDEEP
24576:sWRv/Ybj+ZWOOy/bwQiOnv6yeIu+bSLricsKfeLniMTEdgzFZ:sWubj+EOv+OnNK+bPKfm5TEdgzF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bbba35ba953cc34cdd7cc02e98840620_JaffaCakes118
Files
-
bbba35ba953cc34cdd7cc02e98840620_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 1.0MB - Virtual size: 3.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 194KB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 16KB - Virtual size: 3.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 223KB - Virtual size: 224KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE