Static task
static1
Behavioral task
behavioral1
Sample
bdf59ce563f6c30c884c996ee4b53e72_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
bdf59ce563f6c30c884c996ee4b53e72_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bdf59ce563f6c30c884c996ee4b53e72_JaffaCakes118
-
Size
208KB
-
MD5
bdf59ce563f6c30c884c996ee4b53e72
-
SHA1
0adfd312147acba541f484c4a8b6950c565e8476
-
SHA256
fa6287245f6cbc0b3205e9d73884e997ae9b50a356fa87e6ec274a35b628a64f
-
SHA512
e0e7a94438d782ccc7f3ed23c84a00276d233c224f3034d6cebf46270dea448fee1c9f895959a63d6e2b69bda3bafc9ab5d7312c61ff151ea8d8b87156879bec
-
SSDEEP
6144:V1bAqtWiZLN2CfI6XZ6A82j1UKr1OeA+E3upkjf3s5alvyel:V106WiZLNZTZb8uN5E+E13FPl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bdf59ce563f6c30c884c996ee4b53e72_JaffaCakes118
Files
-
bdf59ce563f6c30c884c996ee4b53e72_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.nsp0 Size: - Virtual size: 524KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 207KB - Virtual size: 208KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE