Static task
static1
Behavioral task
behavioral1
Sample
bfb45c2fe7ff0a6c7a1cb37a17aac1a9_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
bfb45c2fe7ff0a6c7a1cb37a17aac1a9_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bfb45c2fe7ff0a6c7a1cb37a17aac1a9_JaffaCakes118
-
Size
6.1MB
-
MD5
bfb45c2fe7ff0a6c7a1cb37a17aac1a9
-
SHA1
2e4df10694bc84a1bfd5f72f5491f84aa797ebb9
-
SHA256
27beacad71f800e3972cabead0cd9886985487c8919de55004d75cb754344d91
-
SHA512
a852afafb8ea7ed04d29ebcd7c7d9ca1596af9881eed4e1a7af2bd526d9f7684f255d9ab84e2967ff746d54f96a04729c00023c5b459c446f461f210a6538d0c
-
SSDEEP
98304:AcWQgIyo5+YoVUzQ+gKVj0VkkQTlZokZ8752e/GznKPNAoGUi+/FyWzgTk7Opvq:1hoVh1KV4VtQTl6ka5Q7oQ547Evq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bfb45c2fe7ff0a6c7a1cb37a17aac1a9_JaffaCakes118
Files
-
bfb45c2fe7ff0a6c7a1cb37a17aac1a9_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 37KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 1024B - Virtual size: 588B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ