Static task
static1
Behavioral task
behavioral1
Sample
bcef51b886f6b544a6c8c0ac78b2cb0d_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
bcef51b886f6b544a6c8c0ac78b2cb0d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bcef51b886f6b544a6c8c0ac78b2cb0d_JaffaCakes118
-
Size
102KB
-
MD5
bcef51b886f6b544a6c8c0ac78b2cb0d
-
SHA1
8a888a2d7804a6c9ea1a8f8803c89a22531b9594
-
SHA256
d0bf5608df9707124e1116500c3c606c25a7004643313d5aa90a217661ab298c
-
SHA512
5b08f4bf8e5063ec6c2fc18d2a74a0e7f71d03fe2061564e1ab0a4cd8db32ca1c74b28e113ee8b98779f8c3190a7b17a337817709a8e679eba0e7eb62463c8a5
-
SSDEEP
1536:4HOz1hcY/AJCy9v7Zm8ODJH3yAFRfBEOvnfnnKloI:4sfcYIJCy9DZm8Ox3xnfnnFI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bcef51b886f6b544a6c8c0ac78b2cb0d_JaffaCakes118
Files
-
bcef51b886f6b544a6c8c0ac78b2cb0d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE