Static task
static1
Behavioral task
behavioral1
Sample
bda1da1c2a29be683ddc4191e506f394_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
bda1da1c2a29be683ddc4191e506f394_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bda1da1c2a29be683ddc4191e506f394_JaffaCakes118
-
Size
194KB
-
MD5
bda1da1c2a29be683ddc4191e506f394
-
SHA1
39c02b5882046d04c6c234231223f9ddd8fe937d
-
SHA256
1b9923d42239faec1cbf89144c5157d412d4d51b6bf1a7e6a079002c477e1e6d
-
SHA512
0539e3d9d043963199742311cc33b9eb56a99d21cc905920ef2cf5274f1e457d10128b7372c8ea67bf1d33aeee5aad4d7af227b746c77a7cf193c3dfee2474b7
-
SSDEEP
3072:3pnU9kVyc7EfYE/N4vVVQbDC0rJg0wEZYVvzJ/FixOL8RK3:5U9RfYE/N4vVOvC0r+0g14xBK3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bda1da1c2a29be683ddc4191e506f394_JaffaCakes118
Files
-
bda1da1c2a29be683ddc4191e506f394_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.nsp0 Size: 120KB - Virtual size: 124KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 70KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE