Static task
static1
Behavioral task
behavioral1
Sample
bf5fa581e8e41b2d08bd9f50fd30e2e8_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
bf5fa581e8e41b2d08bd9f50fd30e2e8_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bf5fa581e8e41b2d08bd9f50fd30e2e8_JaffaCakes118
-
Size
59KB
-
MD5
bf5fa581e8e41b2d08bd9f50fd30e2e8
-
SHA1
c49d428edbf31760a80f37770cd7df1f150593ad
-
SHA256
d11ee6ed3f651e13e8bc6adb668118ae036577de4578f4b784ea3753d2b10325
-
SHA512
03d639ef1a946d882a52b494d2352ba837c52090bfb7660acaa2c4fd306bf9102f96ff44db49ae73c3a3a26e96e03fcf25c1df41da5560a2e729d86477572779
-
SSDEEP
768:Wk4Wt41GExJwrWrJw+gX9bPZnU7TLdURCQncDS0ig1QxxFyS2FcWRXb6Hk+KnP:WwIzwrWq+4nUfLdlVTXS2/x6HLKnP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bf5fa581e8e41b2d08bd9f50fd30e2e8_JaffaCakes118
Files
-
bf5fa581e8e41b2d08bd9f50fd30e2e8_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 512B - Virtual size: 276B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 1KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ