Static task
static1
Behavioral task
behavioral1
Sample
bdb29fa1b2ef85e5bf5da0e87fe30ae0_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
bdb29fa1b2ef85e5bf5da0e87fe30ae0_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bdb29fa1b2ef85e5bf5da0e87fe30ae0_JaffaCakes118
-
Size
184KB
-
MD5
bdb29fa1b2ef85e5bf5da0e87fe30ae0
-
SHA1
e0429b585fd9e2b2c06bc37e046053ae456523cf
-
SHA256
059a73550072f5b675d75cb4ee2eed5f6b0f5bd055539cabd971294cb245a3b9
-
SHA512
1b615d46d96c73e9395d5f93cb4efc5fbb38a98caf590557b7601dce96d81800e8fc4c38953e9ebd474692e2481636d9a75b9730008fca3ebff37f9b072cd394
-
SSDEEP
768:umge/bKAZU0e4koiPHfqxtRDkmEcyTK26wD8IfA:/h5Zs4kfvizRDiTWS8I4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bdb29fa1b2ef85e5bf5da0e87fe30ae0_JaffaCakes118
Files
-
bdb29fa1b2ef85e5bf5da0e87fe30ae0_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
. Size: 2.1MB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
. Size: 4KB - Virtual size: 868B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
. Size: 20KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.X Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE