Static task
static1
Behavioral task
behavioral1
Sample
bf1c280aee01a0d283be3a5032bbd141_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
bf1c280aee01a0d283be3a5032bbd141_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bf1c280aee01a0d283be3a5032bbd141_JaffaCakes118
-
Size
43KB
-
MD5
bf1c280aee01a0d283be3a5032bbd141
-
SHA1
6b2afae8b430ba3814b3877a84c0ccc945b4a2c7
-
SHA256
b5805b84e7bc95d3a919e292c63e31ed18f9bc18960322704aa12d6d01ca7740
-
SHA512
f8d4e147d482f15be5bc0f8ee5f3262419888b75df6918a8dc624415246a54c5b1e281adc0227e6379134b81ac98631850eb120f36504c2cfdc04b0b5a9756f3
-
SSDEEP
384:sFXdzH/wjnDT9ecpDPMz8a/jdviTvbjfhk9r0zJqjRNTvxOPr+p2IMLGsnEimQ0/:s3ce3EIMSsI2znEygq1+tZLZq5m6eSw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bf1c280aee01a0d283be3a5032bbd141_JaffaCakes118
Files
-
bf1c280aee01a0d283be3a5032bbd141_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 36KB - Virtual size: 33KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 356KB - Virtual size: 354KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ