Static task
static1
Behavioral task
behavioral1
Sample
bce5a5a8b04bea4a792067a063b9c2c5_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
bce5a5a8b04bea4a792067a063b9c2c5_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bce5a5a8b04bea4a792067a063b9c2c5_JaffaCakes118
-
Size
46KB
-
MD5
bce5a5a8b04bea4a792067a063b9c2c5
-
SHA1
7c050fc8524893a983a4ecb071e7f0a0f3ede811
-
SHA256
92369cb96f834bed802ba0359d5c40be0e79b7b70544ae026d8d0ddab0088e53
-
SHA512
878f324ea6c975850711da248542effb32c2e42776f6f3e6aa084b5bbedf06d97942491d6a5406ce6e9b6728cc78106f09cbdb2afd4451c520c3abaf698021cf
-
SSDEEP
768:PAEEN9Cf4XEGZXDuT+pxvPDgAiXKZC2p2ng4nGwcsiOiGi:PODZXcCvfA2p2nNWsiei
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bce5a5a8b04bea4a792067a063b9c2c5_JaffaCakes118
Files
-
bce5a5a8b04bea4a792067a063b9c2c5_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.Text Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 28B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 336B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 836B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE