Static task
static1
Behavioral task
behavioral1
Sample
bbe044576b8b4f9979bc2f6c53a0c388_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
bbe044576b8b4f9979bc2f6c53a0c388_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bbe044576b8b4f9979bc2f6c53a0c388_JaffaCakes118
-
Size
298KB
-
MD5
bbe044576b8b4f9979bc2f6c53a0c388
-
SHA1
f7dc3f1f97a2d243091bc5a4db427de355a5968d
-
SHA256
90115ed34dfabf1574697a22df5719999a452c8f831c47961f5030629158a5b1
-
SHA512
2f5ab66728c8f18e9c38b0e41a7cc5bbe7f13e188400733a6cea530859440b7645f02082bd0e070645a400ac05a9f357f277fc8d1252e99ccc2441562ab95493
-
SSDEEP
6144:yGaLwwWFq/OcF4guTyYkbYbxrsVJfsvL2VlY3BIo:yGLwWFKl0beVj2T
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bbe044576b8b4f9979bc2f6c53a0c388_JaffaCakes118
Files
-
bbe044576b8b4f9979bc2f6c53a0c388_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.text Size: 1KB - Virtual size: 528.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 295KB - Virtual size: 296KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE