Static task
static1
Behavioral task
behavioral1
Sample
bccaf3d98434eaa3d05f95f89245d4b6_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
bccaf3d98434eaa3d05f95f89245d4b6_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bccaf3d98434eaa3d05f95f89245d4b6_JaffaCakes118
-
Size
348KB
-
MD5
bccaf3d98434eaa3d05f95f89245d4b6
-
SHA1
6ecedf8821b1e1b7e0a951b365a1d59b2a4c7e38
-
SHA256
2e5e15dc6b290257b4d3dc47d55a9e0b4c79ad1a0d7a39618ed1be6ca87f470d
-
SHA512
886dc67230ef9a9eb1c963f3ea55ce0fb969c2d7682854789cb718ec87e92a159cff00bdcfc71a12eb06211b870f4300d5cdbf220c5a195353677f6f5b419862
-
SSDEEP
6144:tEpKiKdZY2YHd58caQkivyjmTB4cYCV7qAKp5U0wp8:tEpK6VHb8cd3lXZq3P
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bccaf3d98434eaa3d05f95f89245d4b6_JaffaCakes118
Files
-
bccaf3d98434eaa3d05f95f89245d4b6_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 332KB - Virtual size: 329KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ