Static task
static1
Behavioral task
behavioral1
Sample
bc461de9dde95d25756f56b9d0797454_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
bc461de9dde95d25756f56b9d0797454_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bc461de9dde95d25756f56b9d0797454_JaffaCakes118
-
Size
32KB
-
MD5
bc461de9dde95d25756f56b9d0797454
-
SHA1
c92af739d1687464d79e85d9cdd6134a82dc295b
-
SHA256
e343d7302c275b44656d9c2c2116e6bc83dba807f006e5028da6990c544f728f
-
SHA512
f0ea2b41e95e10d7d7c192b2b20289fe76ec2d52caf666664f4fc4b98c08ea61966f5e6f7b535ffb62144edbd8197a6aa121a425d58ae08a0f73664caf87e758
-
SSDEEP
768:wHSEhemiKtec5hs/X/QiR2I5Yu2nbcuyD7UXpU:wy1mReSef/Qi1inouy8Xi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bc461de9dde95d25756f56b9d0797454_JaffaCakes118
Files
-
bc461de9dde95d25756f56b9d0797454_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
CODE Size: - Virtual size: 156KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 28KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE