Static task
static1
Behavioral task
behavioral1
Sample
bd6634752bb044356b518bbcb3e78959_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
bd6634752bb044356b518bbcb3e78959_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bd6634752bb044356b518bbcb3e78959_JaffaCakes118
-
Size
248KB
-
MD5
bd6634752bb044356b518bbcb3e78959
-
SHA1
4a6e70830f1341102846d78c4ea51c5ca4d5b387
-
SHA256
198fc22f6b35d32fe2be2031742ac83daa71b1f93a4af7396fd0bf7f70d08661
-
SHA512
045a133731d468d059294bf9d180f889ccf61a17a0e86827788bcc79f8ed3c907d85d1d19fa3daa61b29122b695fa6f4fb831e718dd3a24c803c7e2b416f7dee
-
SSDEEP
3072:ke0XbYKrM3n9pc3x/IYoI2CNyktCGn2NDvuPMBpDYhDPqOYqd5O6MBp:aULnYBQY20nqgGunYW1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bd6634752bb044356b518bbcb3e78959_JaffaCakes118
Files
-
bd6634752bb044356b518bbcb3e78959_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 4KB - Virtual size: 16B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 237KB - Virtual size: 256KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE