Static task
static1
Behavioral task
behavioral1
Sample
bf9afed5e117fd4ea269bc8f9cdfc2e3_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
bf9afed5e117fd4ea269bc8f9cdfc2e3_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bf9afed5e117fd4ea269bc8f9cdfc2e3_JaffaCakes118
-
Size
80KB
-
MD5
bf9afed5e117fd4ea269bc8f9cdfc2e3
-
SHA1
da21155bd0ce2d571e9b1b96c9227d22a5046e33
-
SHA256
6038da7329e7f9cbeebb063ce7d0ba82f371f7629948849739c78f04da4a32bd
-
SHA512
7c0ba134b77dd58cc12a6612f474b82f5d58fc3c3a815351ea2f6b141be534586c41d4d5546cac264c49f2d50b13ca0d85fcdc7249c9a7eeed78978da5581c12
-
SSDEEP
1536:x1Q9uxgKmL34xDrYsnVbH8MMdKrzcHNFV+XlgywJpxME3BKv+LMmO3:q3Kmj4VZZH89kgieDHt3BKv+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bf9afed5e117fd4ea269bc8f9cdfc2e3_JaffaCakes118
Files
-
bf9afed5e117fd4ea269bc8f9cdfc2e3_JaffaCakes118.exe windows:4 windows x86 arch:x86
79b3362178937bf9559741c46bb9e035
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
Sections
.MPRESS1 Size: 77KB - Virtual size: 540KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE