Static task
static1
Behavioral task
behavioral1
Sample
bf5d864faffaa7b51d5da0b66f0de3b1_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
bf5d864faffaa7b51d5da0b66f0de3b1_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bf5d864faffaa7b51d5da0b66f0de3b1_JaffaCakes118
-
Size
521KB
-
MD5
bf5d864faffaa7b51d5da0b66f0de3b1
-
SHA1
4d0b5bb121af21c01fb24a59e20b8069a24269b5
-
SHA256
8564beda7ee3b910c0d2a9745a6d7254bf22b6d42e95e64fd96d5905898369a1
-
SHA512
a4e612f2fe2d752223778465ab0fcf4d43aee0c3c88868a6a61b0ad5ba8c4e9b37c1dd79aeccc7637a19c708e4d0457efee357a4112e74c39e2499fc29e3f6ef
-
SSDEEP
6144:zhcMSbSohE9q2PsXrSVew/X2+wZHeSPVep6s6BCF6GfEWfadRNH0Qg4oSN:zSNS2E9/cZw/X6eSPtfS6G6s4oSN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bf5d864faffaa7b51d5da0b66f0de3b1_JaffaCakes118
Files
-
bf5d864faffaa7b51d5da0b66f0de3b1_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
CODE Size: 344KB - Virtual size: 344KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 175KB - Virtual size: 176KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE