Static task
static1
Behavioral task
behavioral1
Sample
bdc2cfdd8930eeb71c6620f611f7d10c_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
bdc2cfdd8930eeb71c6620f611f7d10c_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bdc2cfdd8930eeb71c6620f611f7d10c_JaffaCakes118
-
Size
2.9MB
-
MD5
bdc2cfdd8930eeb71c6620f611f7d10c
-
SHA1
75fae8b4e2dc044e3e7d54e25f03a5625e638fe5
-
SHA256
1e7e4a7fec0a14fd7c1143e5a7bb929aa73c7d2492ff0b67dc62e4781f8e1826
-
SHA512
8d4d509dd7bf4142b7dc08d362075b21912bbac8f4341b65137133e2c13290466e047fdb178b87d020729385766374c5fc4b14bbf291b7ab909dcee22971bb24
-
SSDEEP
49152:mHQXgvkTs4S+oTPGUHJeROOMk3mCyAZupCLgfFwzx3ufwU2M/MXDOIZbJdPmt/Hr:mHQXxTsf+6dwRNMk3ospLgSzx3kwZwio
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bdc2cfdd8930eeb71c6620f611f7d10c_JaffaCakes118
Files
-
bdc2cfdd8930eeb71c6620f611f7d10c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 714KB - Virtual size: 714KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 33KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 5KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 36B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 47KB - Virtual size: 46KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 8.1MB - Virtual size: 8.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ