Static task
static1
Behavioral task
behavioral1
Sample
bd8f9dd0f621a86548469cd64ba1ac1a_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
bd8f9dd0f621a86548469cd64ba1ac1a_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bd8f9dd0f621a86548469cd64ba1ac1a_JaffaCakes118
-
Size
1.5MB
-
MD5
bd8f9dd0f621a86548469cd64ba1ac1a
-
SHA1
2b4c4b32afd849305fadcca7fad7657d42413c21
-
SHA256
3e096a6e0c27d87bde8d4d37e30eebf9c89186b7836d3ea0c00ee8d4ed057c41
-
SHA512
0a47cc4f8bd98db954539c4363033b7f9f2f4c1a08591e2117dab5551d953727402c8d9e01618fa777d86c51ee6943a6f5001b4368f383139ba6f0d5df9b54f1
-
SSDEEP
24576:OUVOMbQOH17Jfz8QRwDyag5r94SoJGGmCTCs1Zgu71PkUm1j1u4hwxqkd:/OM3gBy34SoQGmW1C8dkUm1j1nKokd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bd8f9dd0f621a86548469cd64ba1ac1a_JaffaCakes118
Files
-
bd8f9dd0f621a86548469cd64ba1ac1a_JaffaCakes118.exe windows:0 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
Sections
+text Size: 24KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.�data Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.da�a Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 498B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 304B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rloc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ