Static task
static1
Behavioral task
behavioral1
Sample
bc5a9aa59fc9a7b41b7982bacab03dbb_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
bc5a9aa59fc9a7b41b7982bacab03dbb_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bc5a9aa59fc9a7b41b7982bacab03dbb_JaffaCakes118
-
Size
120KB
-
MD5
bc5a9aa59fc9a7b41b7982bacab03dbb
-
SHA1
20cbf9bef4cef25f80ba5a1767ebdf60c48c9268
-
SHA256
9709987d4305131f187f74528e7b13acb394717eedbe2c61a7692e15299cafff
-
SHA512
d9b6c05ff457d796ff1d88a1e698b12023e6945129b6119a5dd51da18b768c058faed1cbefad29e234fad0d377d2e674fc08a2245d9994564b61de47e0cc0c5a
-
SSDEEP
1536:62UvCXnQQC4Jh97kO0X2AuVJZSR9lsJNs1WQQUpsjLHtpVtx7rkdFsqwS2TS:LeCXQEh9nrMRLsJNsFQ5L7rsiqwrW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bc5a9aa59fc9a7b41b7982bacab03dbb_JaffaCakes118
Files
-
bc5a9aa59fc9a7b41b7982bacab03dbb_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
Size: 54KB - Virtual size: 176KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 55KB - Virtual size: 324KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.spack Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE