Static task
static1
Behavioral task
behavioral1
Sample
bc3b91e4a1869eee25c2391bfcfdfb42_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
bc3b91e4a1869eee25c2391bfcfdfb42_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bc3b91e4a1869eee25c2391bfcfdfb42_JaffaCakes118
-
Size
128KB
-
MD5
bc3b91e4a1869eee25c2391bfcfdfb42
-
SHA1
885e77865502cfcc7461daaac43bba676b81aacd
-
SHA256
3205e54cc19de271f65dd501e1734c56775730bff6a60cc6dfe47c4a1d58ef20
-
SHA512
9fcc3098f21d2beeefef28423881bd3eae2e967987425cae671a10e4016b9b1164602e87ca0d2805a290a1b523e505f4c76f69cd96dd88ca859b70c678b08784
-
SSDEEP
3072:ijOpZS/4pdKC+uvEAdUz7VjQhM9L+1eqTQot39cNoWw3outH:O/4AmdALCQEcNOoS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bc3b91e4a1869eee25c2391bfcfdfb42_JaffaCakes118
Files
-
bc3b91e4a1869eee25c2391bfcfdfb42_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
atnm Size: - Virtual size: 1.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
erzg Size: 124KB - Virtual size: 124KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE