Static task
static1
Behavioral task
behavioral1
Sample
bc131e49e768de9ed03f7d3aea6bd42a_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
bc131e49e768de9ed03f7d3aea6bd42a_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bc131e49e768de9ed03f7d3aea6bd42a_JaffaCakes118
-
Size
38KB
-
MD5
bc131e49e768de9ed03f7d3aea6bd42a
-
SHA1
e765c0f7b4daa7c45489843bb9077ae854262879
-
SHA256
903d27a04eb3a35bc5c52c831a526029ce58691b08bd6005e00fc38128bed48a
-
SHA512
fefa7cd2e3fd56688bcda59ac566a892dc183d68b1a8a6118448751c0623c681e5541cbd568c4a6a5515c9dc5d00203f8597dfd8802c5d4dd286c05acf677bf9
-
SSDEEP
768:38fDnkUjWmpSPWyNAQyuQJJES3FHGkSDRn4ljs4eoTH/SRd8Qxa:GnkZOvyNAQyxES3FGT9nQjSoGRdm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bc131e49e768de9ed03f7d3aea6bd42a_JaffaCakes118
Files
-
bc131e49e768de9ed03f7d3aea6bd42a_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: - Virtual size: 48KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 95KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE