Static task
static1
Behavioral task
behavioral1
Sample
bcfa6d8c9c16b7b53329185211ec151f_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
bcfa6d8c9c16b7b53329185211ec151f_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bcfa6d8c9c16b7b53329185211ec151f_JaffaCakes118
-
Size
354KB
-
MD5
bcfa6d8c9c16b7b53329185211ec151f
-
SHA1
6d1534c6a5f5e4f796670fab345576a7e3f61d6d
-
SHA256
3503af42e7ea5fd69bf6141b360b38ecccd9f734232b0f0072c9d332552fa3f6
-
SHA512
bcd5f39a03406c1229fd45ab003249edf4913397eb951b20b483e29360cc66da558b178cb108564b36b4a27464a90c4e7fb3f39a3b8911116f46f2647084f61b
-
SSDEEP
6144:FLzaIMPUEt7yMQNwCFnbcUOtA1hPoEuDiO10Clm0YriLxGBNNgDGgM+aszuQ:JbExaJbcUOtA1hAEul10piLxGBNGDHM0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bcfa6d8c9c16b7b53329185211ec151f_JaffaCakes118
Files
-
bcfa6d8c9c16b7b53329185211ec151f_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.data Size: 288KB - Virtual size: 700KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 39KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE