Static task
static1
Behavioral task
behavioral1
Sample
bf71db0c6dfa1e4011622d3a61c3af89_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
bf71db0c6dfa1e4011622d3a61c3af89_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bf71db0c6dfa1e4011622d3a61c3af89_JaffaCakes118
-
Size
653KB
-
MD5
bf71db0c6dfa1e4011622d3a61c3af89
-
SHA1
1c38e8a3aaf845844d66c7a44923781a95216cd9
-
SHA256
ddfc5c5d995200259cf5c9325670b0f87ed4dea351739d03ed6a46abba30b0a2
-
SHA512
eb6fd5539c74d2f52d0d60f44822be8a94b579c1a6a0e8e1c1e6af0229458950c43d05472c93873f6d1ced625644f74e01e52ec54c3fc69449fbd0e323e97166
-
SSDEEP
12288:9ZYmnKCNndYtMt5IbrBaZaPnrE2YOSa45PJ29/f5R/HjSyRM2ki6AvZcjtR6A5u:bY+KCNnKto5YrBeaPnrE2xSpxA/fJRBx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bf71db0c6dfa1e4011622d3a61c3af89_JaffaCakes118
Files
-
bf71db0c6dfa1e4011622d3a61c3af89_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
MEW Size: - Virtual size: 780KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�uۊ�� Size: 653KB - Virtual size: 712KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE