Static task
static1
Behavioral task
behavioral1
Sample
bd857d6df08d4e23e12d12ddd2c356c8_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
bd857d6df08d4e23e12d12ddd2c356c8_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bd857d6df08d4e23e12d12ddd2c356c8_JaffaCakes118
-
Size
17KB
-
MD5
bd857d6df08d4e23e12d12ddd2c356c8
-
SHA1
e168c26ed745ea7a4b695ece27ab0a31b4ce1760
-
SHA256
2b1aca0a9e387f916b285424a5a1d474ec2fc8e9b9191620ea318f1d422dd355
-
SHA512
fdf94a4c889a98d72918f55c6b902d3a8d25ac1d5adec801ce65bf63cab156fc61e2245ebf6631ce1e06d5e117cc34bf90a2dcbe5de35919ac13c07405aa46e7
-
SSDEEP
384:mFW/Wl4BKGOuAjWAJundLzKb/oD9fmi/8Q7f5sWtd2rehlT:HANaAJKdnKbwJuiUQTVtd2rehB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bd857d6df08d4e23e12d12ddd2c356c8_JaffaCakes118
Files
-
bd857d6df08d4e23e12d12ddd2c356c8_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
��Q0 Size: - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
��Q1 Size: 17KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
��Q2 Size: - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE