Static task
static1
Behavioral task
behavioral1
Sample
bf3b0b9d8dbbbb663e23098da9fe69c3_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
bf3b0b9d8dbbbb663e23098da9fe69c3_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bf3b0b9d8dbbbb663e23098da9fe69c3_JaffaCakes118
-
Size
32KB
-
MD5
bf3b0b9d8dbbbb663e23098da9fe69c3
-
SHA1
a33044f3814ec5b8cd2006f6dd4f4e71d2b1a3f8
-
SHA256
a00edcb6e348f7bcd9e8fadb72b00a8635f14d1dff9f531d639855ec9bab9e1d
-
SHA512
9e596b64b870ae572ebe6313dbe7d7a22726114c6cd6c28b6db7513858a4b7a8abc6dcd6bc84404514858c90da8322ddd770dd718a332d854bd31ea0f65d1d42
-
SSDEEP
768:D6h/R0Ebh+lYUPTX/TIqYYEFnzNlqlBhzPCk:Wh/RfbhcLMNbRNWBhV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bf3b0b9d8dbbbb663e23098da9fe69c3_JaffaCakes118
Files
-
bf3b0b9d8dbbbb663e23098da9fe69c3_JaffaCakes118.exe windows:4 windows x86 arch:x86
14610dd0ebbc796a9a3a2ba2cdd24e79
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
user32
MessageBoxW
Sections
.text Size: 512B - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE