Static task
static1
Behavioral task
behavioral1
Sample
bc5265a4da2416723f5e6a7b382134a4_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
bc5265a4da2416723f5e6a7b382134a4_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bc5265a4da2416723f5e6a7b382134a4_JaffaCakes118
-
Size
89KB
-
MD5
bc5265a4da2416723f5e6a7b382134a4
-
SHA1
f43c4f02bd140e67572fc3f71da22251e29c13a1
-
SHA256
5bfe851406137e309d24438a90585b904e8a6f16d1792e9ba013d9b7f8f4f222
-
SHA512
3b0884d7b7c9affef77368d397c4b8061e35075f177dbc8be1700068b1d9a793a09e38638641c00ecf3e8e0982a90a2aa0571df2e781881e4253b717f3fd231f
-
SSDEEP
1536:Cc+jz0OVoeftjhHe4FzTyAFABTE/7SuznLOXtmiijP0e21cJdQIkhVRI5fy9p:CQarxaAyBEjfOArcSJkhVRI5a
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bc5265a4da2416723f5e6a7b382134a4_JaffaCakes118
Files
-
bc5265a4da2416723f5e6a7b382134a4_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 43KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pgc! Size: 43KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE