Static task
static1
Behavioral task
behavioral1
Sample
bc1df8bd42a426f87c7f63c6e7782796_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
bc1df8bd42a426f87c7f63c6e7782796_JaffaCakes118
-
Size
127KB
-
MD5
bc1df8bd42a426f87c7f63c6e7782796
-
SHA1
285296274f0ff41527d426f46b4b5abd4e8e2605
-
SHA256
c3e3ba27bdab5dd37fc0bc8380c025121504d2df5c8067ccfb31278ab46aaf0e
-
SHA512
22431900b58bc43b5eb3ded52c00b2134472339a2740e2483dd163f27820ecd8adc0b2d46a1a9b9f69954f3d398977ae45f3f6d48dc102fcdb1a047f8328ba44
-
SSDEEP
3072:hTAz5wIUQcKFLG6dVY/h27Ol3OwCnE+3D:h/QDLVd37CO/EgD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bc1df8bd42a426f87c7f63c6e7782796_JaffaCakes118
Files
-
bc1df8bd42a426f87c7f63c6e7782796_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.nsp0 Size: - Virtual size: 476KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 44KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: 81KB - Virtual size: 84KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE