Static task
static1
Behavioral task
behavioral1
Sample
bcb2c88c937037fd15820c3554d8df74_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
bcb2c88c937037fd15820c3554d8df74_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bcb2c88c937037fd15820c3554d8df74_JaffaCakes118
-
Size
375KB
-
MD5
bcb2c88c937037fd15820c3554d8df74
-
SHA1
f1bf1ac01b923ac8d3ec5808714b4d52222d01e9
-
SHA256
f1049ae412f5bb09b99956c5a1ff602a5bf17defe3c02890186dc3382d32ae07
-
SHA512
048b67d5900279788ea3dbdc365ea63c0a28a79f3402940ccfabeb63a8204bec1cb15559ab39b1de3a4717606b3fa700a554f18e7fd7233f67aca97d1eb827cc
-
SSDEEP
6144:eG6cPpODxCdS7eOUQ41B3x8YdlFC3otpXK5iXSJLYaYTvCV+CmdP8HKKXK5G9Xfi:3VcC7pK52BTvCVauHXK5GJi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bcb2c88c937037fd15820c3554d8df74_JaffaCakes118
Files
-
bcb2c88c937037fd15820c3554d8df74_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.textbss Size: - Virtual size: 145KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 363KB - Virtual size: 364KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 800B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 24B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ