Static task
static1
Behavioral task
behavioral1
Sample
bd5dcf48b3fde84e18c022996d39f81e_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
bd5dcf48b3fde84e18c022996d39f81e_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bd5dcf48b3fde84e18c022996d39f81e_JaffaCakes118
-
Size
50KB
-
MD5
bd5dcf48b3fde84e18c022996d39f81e
-
SHA1
2a3350458e5b8023325d92d4fbc85d098aa63dc9
-
SHA256
026ad5c7be9f16324c1e0b8e388a1f27810f62877702caed683206b4d131c50b
-
SHA512
61508d9f02e40975495076dbcf953eced8ac5c485b30f5eb905bea8e018c4737147f7d359050656548624f59f96c65264e4328a790b28f81adb1aa4f07543d7f
-
SSDEEP
1536:8BzhKYvHGDxsm5aka3hLIg3rU270AwZC/Jk99:ChVvHGDxsv3hL7rUHa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bd5dcf48b3fde84e18c022996d39f81e_JaffaCakes118
Files
-
bd5dcf48b3fde84e18c022996d39f81e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: - Virtual size: 132KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 50KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE