Static task
static1
Behavioral task
behavioral1
Sample
bf4081ec3d11b731d1667c105b2833d3_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
bf4081ec3d11b731d1667c105b2833d3_JaffaCakes118
-
Size
638KB
-
MD5
bf4081ec3d11b731d1667c105b2833d3
-
SHA1
5f1bbfadcf8c0be6becd2159c18acb2069f24e15
-
SHA256
9353d98ce8c3444563f12f0f12a358bd23e6f3923bdeac4820b965d8c0e9ca19
-
SHA512
513353437b53a4cf79bc4aaa54802678c1a35c1e96a72f6d50f9283f169fe3e3ae909fecb7e385f4b604983dbb484f759fbf69bb5fd99487227f67e072351173
-
SSDEEP
12288:lT0Gnri80naG80rlMX2L3Eb67XyfukoHuOTAM686AcufbpjJf3qNKiqRj:F0Gm8ZGZhP3Eb67XuzoOOJ686Cb3f3/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bf4081ec3d11b731d1667c105b2833d3_JaffaCakes118
Files
-
bf4081ec3d11b731d1667c105b2833d3_JaffaCakes118.exe windows:4 windows x86 arch:x86
5a498eee87e4d89512a84502f500181f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
LoadLibraryA
Sections
Size: 69KB - Virtual size: 208KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 64KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE