Static task
static1
Behavioral task
behavioral1
Sample
bd08d6279fff7266d01f0807233dcffd_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
bd08d6279fff7266d01f0807233dcffd_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bd08d6279fff7266d01f0807233dcffd_JaffaCakes118
-
Size
133KB
-
MD5
bd08d6279fff7266d01f0807233dcffd
-
SHA1
56c844eb2442004685132add034d4c209b9bc76b
-
SHA256
f8c932539d548242cbccae967c0df90d601b0fb9a636613410110dadc9879d81
-
SHA512
dac0d1bce766c179b0cf18c07519e7674d89051d2560f9bad47686004c11cbca57dc0132ef301cd5e7a969b908ccd869002cb82060c531dc91606521bcc7b1f3
-
SSDEEP
1536:eVsYq/QyOAq3AIq8AQh8BU+c7bRULZG9SeTammzg9z9HFLKH:eVQBOAq3zAxBU/7biGAeTZJd9lWH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bd08d6279fff7266d01f0807233dcffd_JaffaCakes118
Files
-
bd08d6279fff7266d01f0807233dcffd_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.text Size: 92KB - Virtual size: 92KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.Pav Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE