Static task
static1
Behavioral task
behavioral1
Sample
bf75521851990929ca9e763c93621f2d_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
bf75521851990929ca9e763c93621f2d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bf75521851990929ca9e763c93621f2d_JaffaCakes118
-
Size
256KB
-
MD5
bf75521851990929ca9e763c93621f2d
-
SHA1
b0d7f0f6004a0405dc23fd4edde38b5f56b40120
-
SHA256
3f7de93095dc38495f5d012d5d2ce3e58ff67d95c4a82da38a6a25eda081170d
-
SHA512
62fc2951eab3842f993420609127f9d83a4c7568f4d633942ef8ecc78bd3b15b5b2f4ccfc46d47998020147a0338e710f764736e11458cecc6558d09d2f25a68
-
SSDEEP
6144:qnFuO548Ulgt7qM+3RJnVh05JSCvIbBTq/T6WT2JpKv2m282i+QESF:EUGl3+37VyLmg/TX6mWi9T
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bf75521851990929ca9e763c93621f2d_JaffaCakes118
Files
-
bf75521851990929ca9e763c93621f2d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 81KB - Virtual size: 540KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 170KB - Virtual size: 172KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE