Static task
static1
Behavioral task
behavioral1
Sample
bd47905f692020f420eb9c1e6418d168_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
bd47905f692020f420eb9c1e6418d168_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bd47905f692020f420eb9c1e6418d168_JaffaCakes118
-
Size
38KB
-
MD5
bd47905f692020f420eb9c1e6418d168
-
SHA1
4d0fd2df74a51780db4b5c7030bdf31d199a40f9
-
SHA256
7d63e7a5663f179ec0632b205bad86e281dc62ebb21d36c8fa50f51811366d70
-
SHA512
f9e97c3fe4c03e697b090d2efbf90238bdb471eee0772847e996107b08a5365ed2dbf95f5c9435e937ff321c12b2de6d32754abbf47f82cf663e00004c79fde2
-
SSDEEP
768:I1xwcfWJXOkgTiadmgBWpTl7dSQXv9cmf3hTThpx/YYKZI1fpKMaJbrvp3h:pJITiWmgB+lpb/7NTxQApaJbrvpR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bd47905f692020f420eb9c1e6418d168_JaffaCakes118
Files
-
bd47905f692020f420eb9c1e6418d168_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
ul850 Size: - Virtual size: 88KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ul851 Size: 37KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ul852 Size: 749B - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE