Static task
static1
Behavioral task
behavioral1
Sample
bdf1e21a0a3ec755e06e960d1dcb2373_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
bdf1e21a0a3ec755e06e960d1dcb2373_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bdf1e21a0a3ec755e06e960d1dcb2373_JaffaCakes118
-
Size
83KB
-
MD5
bdf1e21a0a3ec755e06e960d1dcb2373
-
SHA1
7cc6da702fd89fd5770e8138273c873b6abbe79e
-
SHA256
93ab1e7e7ea6fc8854d7072373de52b0c5c40960322007ba4e466d0be6b36911
-
SHA512
34ccb679e56c949b782d1eb620773ad9d7b030512586d8e78e47c954c200e23ed9805e1fa78ed7e8a2867cf511fbdb20759d496a7c7ad01cce2a47a49bfa5090
-
SSDEEP
1536:YmLp/UH3wpSi95GKYr5bqRF4VgVrZmndPnGGRnjEErxTWDTMqhGKYIZTET8bDQ:e3wZ9I5bWairQn5nVhjBkMqhGKZTbbc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bdf1e21a0a3ec755e06e960d1dcb2373_JaffaCakes118
Files
-
bdf1e21a0a3ec755e06e960d1dcb2373_JaffaCakes118.exe windows:4 windows x86 arch:x86
12040540253570719ae0a367956e8481
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitThread
GetStartupInfoW
EnumDateFormatsExA
FatalAppExitA
GetNumaAvailableMemory
BuildCommDCBA
CreateConsoleScreenBuffer
GetWindowsDirectoryA
OutputDebugStringA
RtlUnwind
HeapDestroy
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.zrdata Size: 27KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE