Static task
static1
Behavioral task
behavioral1
Sample
bce13006048633039ca11184ee278127_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
bce13006048633039ca11184ee278127_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bce13006048633039ca11184ee278127_JaffaCakes118
-
Size
117KB
-
MD5
bce13006048633039ca11184ee278127
-
SHA1
af05de9253f06f89b7062646c19630dcda3176d4
-
SHA256
89720cc1137483f3c5f2aa440bbc9783b57e071be8b6335cbbc42bf5203735d8
-
SHA512
cdfa4eb1532df824b22b3b12e39d334d8eb181bf8952ac9096f4deaf15e7b0981bf9beeecc2f851972162d204b815116186e2c0d7b60de28dbe193320a1725c8
-
SSDEEP
1536:JA6xcSDYRuzM71qF0X/n2/F3E5SKDccCLn62eJ+Q4yexiFexcH0:dxJKF71qFYPkEUecrn6xexiFH0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bce13006048633039ca11184ee278127_JaffaCakes118
Files
-
bce13006048633039ca11184ee278127_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 95KB - Virtual size: 95KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 2KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 12B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ