Static task
static1
Behavioral task
behavioral1
Sample
bf79bcb82ba5f354a50fd6308269d230_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
bf79bcb82ba5f354a50fd6308269d230_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bf79bcb82ba5f354a50fd6308269d230_JaffaCakes118
-
Size
329KB
-
MD5
bf79bcb82ba5f354a50fd6308269d230
-
SHA1
9558f55bac2053ae0c490601c93a137d1a6d0161
-
SHA256
56b988255dd576bf109113faa2d41c62900d04986e5a740a58ed139ccdc9428d
-
SHA512
7330b39fcc447ca94865e9afac49d9490d9ae0e2b4315ca617eefdd02c9daed3632686c3858b241486256ac83ee581112fafe8be95ec5c5bf9a9f4ce1b15d4bc
-
SSDEEP
3072:TLfALNxIAqfoZE5pnGHb62Tob4d3zLKALrQXCS7IpKp8mQGzl6rsfFr90qs2U5fo:TMNiAqxnG7t5ROg7aldxDK2nO4WKKo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bf79bcb82ba5f354a50fd6308269d230_JaffaCakes118
Files
-
bf79bcb82ba5f354a50fd6308269d230_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 294KB - Virtual size: 294KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 33KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ