Static task
static1
Behavioral task
behavioral1
Sample
bc6ad263ae33d3d59c95d85cfa4152f5_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
bc6ad263ae33d3d59c95d85cfa4152f5_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bc6ad263ae33d3d59c95d85cfa4152f5_JaffaCakes118
-
Size
97KB
-
MD5
bc6ad263ae33d3d59c95d85cfa4152f5
-
SHA1
233d0080d4b7d5bd406532e9557a652f93f95f9d
-
SHA256
0f8d15af190f0beb4b9033172032d713288e61060c4bf459b37201b2d332080f
-
SHA512
5598aad4276d57762e69f8e12c983d0645d02b0f6b092e385b0949d9a7cc5762c17b63008b288a1b89f13f8aa295b69b47776bada143fd02509b292b433d5abb
-
SSDEEP
384:C4K9N4OA7QvHx3L0FJa1a4nNoRUVpu35slJkiBL+a3YCo5ZEH4FoCNZ:s9NN+Qp70jaxNoWVpu3e4iVl3YC+6Y6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bc6ad263ae33d3d59c95d85cfa4152f5_JaffaCakes118
Files
-
bc6ad263ae33d3d59c95d85cfa4152f5_JaffaCakes118.exe windows:4 windows x86 arch:x86
46646950e38cdd1519d35c0c539d2b12
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
SetErrorMode
ExitProcess
Sections
.text Size: 64KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE