Static task
static1
Behavioral task
behavioral1
Sample
bc820cd39670d78f9fa6c8ab81f66aa6_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
bc820cd39670d78f9fa6c8ab81f66aa6_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bc820cd39670d78f9fa6c8ab81f66aa6_JaffaCakes118
-
Size
153KB
-
MD5
bc820cd39670d78f9fa6c8ab81f66aa6
-
SHA1
33afdf2db21bdae4c33145a9f76c1e8c534ce065
-
SHA256
b7fa90b53719115cf4514a9bc978ee6e068eea50554811951a8d5a6ec38099cd
-
SHA512
2f7319b51991656d16ce47584809805df2a66854c5c2d10bfdcfbde0b512e395b572540ab4e59f05d0f7695775b50ee8d0e36f684d410b48a2fe8d4bcaa3a14c
-
SSDEEP
3072:d2jpmyvLmkpvO0MKW1ru390djY5RQw5cLV4bBhdwKrUifPXpkOJ:Y5FXK1gkk5RQwnbT28r/2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bc820cd39670d78f9fa6c8ab81f66aa6_JaffaCakes118
Files
-
bc820cd39670d78f9fa6c8ab81f66aa6_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 3KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 92KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE