Static task
static1
Behavioral task
behavioral1
Sample
bd47e36845974142223b28fbdadf2182_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
bd47e36845974142223b28fbdadf2182_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
bd47e36845974142223b28fbdadf2182_JaffaCakes118
-
Size
724KB
-
MD5
bd47e36845974142223b28fbdadf2182
-
SHA1
c4bfe46511fda4bce04bf122ff35c6b12dfd56e4
-
SHA256
588cbf1988d6a66da8229cea6d71bbdc0491cd7c215f54c8db3644c0f450e17d
-
SHA512
836767344e0ea2ee8d169ce6df7d68ece504eee2540b8c8b22fa22b25bd385c6a3dcc86468b513effcfe7e8eefc24b17cce32c38797ac4306400b6e3e7e9684d
-
SSDEEP
12288:nt9v5UZIvX41qVb0xxOSDjld1XBRXjIjb7i1yW9:nt9O4wm0xxOOrRRyIyW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bd47e36845974142223b28fbdadf2182_JaffaCakes118
Files
-
bd47e36845974142223b28fbdadf2182_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 318KB - Virtual size: 318KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 103KB - Virtual size: 103KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 14KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 252KB - Virtual size: 252KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 31KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ