Static task
static1
Behavioral task
behavioral1
Sample
bcf9c4b607863f7bbee6082637746327_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
bcf9c4b607863f7bbee6082637746327_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bcf9c4b607863f7bbee6082637746327_JaffaCakes118
-
Size
19KB
-
MD5
bcf9c4b607863f7bbee6082637746327
-
SHA1
d41c6dd15901ae66f6c114d923e0a041b628e423
-
SHA256
a8831e74d90c3dfe67dfc735fc43f4d9501fb61d877628eda6e8805a9eab39e0
-
SHA512
6b6895474542b0120b15c808cc1bd0c82eb38c1fe9ac1f5fadefda2e4928deb446974aaaea1e2833483f50daed2b782cf14ae585ee705147974996aeba1bb450
-
SSDEEP
384:zEuBqcKRUpLszYLyMmXTauSNIREkQdeEUABaX1b6:4uBq3CpLszaSSGCkkeEU1X1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bcf9c4b607863f7bbee6082637746327_JaffaCakes118
Files
-
bcf9c4b607863f7bbee6082637746327_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 512B - Virtual size: 192B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 2KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 984B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ