Static task
static1
Behavioral task
behavioral1
Sample
bd1dab4b867da9a58d0d0362f922808f_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
bd1dab4b867da9a58d0d0362f922808f_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bd1dab4b867da9a58d0d0362f922808f_JaffaCakes118
-
Size
772KB
-
MD5
bd1dab4b867da9a58d0d0362f922808f
-
SHA1
cc5ac7d637fe46d975620d08aca13d90176c40e8
-
SHA256
7bfa756bdd1e512ea036e39216ebeacbfde7f8bdc6d803bca67981b18d1a7b30
-
SHA512
52e18cf540bb38207da707717c4cb304e0ef7c56a78788b7083dc27c21724c3c93fc21de113f84428fe406b1327d156b616cfba50683eac66ba3a007b00094d9
-
SSDEEP
12288:J8UFoB77777I777GQaH+gzQbu5V2jHwBhDQsh3pD30vO8BT2zR2CebD3LMHaOPh7:J1GB77777I777/buZUo930VT2tBc3wT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bd1dab4b867da9a58d0d0362f922808f_JaffaCakes118
Files
-
bd1dab4b867da9a58d0d0362f922808f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 566KB - Virtual size: 566KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 20B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 37KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 149KB - Virtual size: 149KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ