Static task
static1
Behavioral task
behavioral1
Sample
bfbca36deb7109f8722e5ffc0673d708_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
bfbca36deb7109f8722e5ffc0673d708_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bfbca36deb7109f8722e5ffc0673d708_JaffaCakes118
-
Size
168KB
-
MD5
bfbca36deb7109f8722e5ffc0673d708
-
SHA1
b3a9a57961bc2006b52b6f4d82a4bf92a01d951d
-
SHA256
d21d96df9bbcc03f16934af495ce130acbd09d04950bd3ab1bc6cc5ee993083d
-
SHA512
25cde505147b9804771eccf0983613154c3fbe23e9d624e1d831448b9ab05f33b5ecc55e7d2611266f24963d0a82c2295587319f2fb95e992945715ca8471903
-
SSDEEP
3072:615vGAjm9JuB/RVgU974KlGro2UWQRtgxC6c3ovNRdNUirqSmF7Nv5n:615vGAjemVJ974KlGM/g46cYVWimF7h5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bfbca36deb7109f8722e5ffc0673d708_JaffaCakes118
Files
-
bfbca36deb7109f8722e5ffc0673d708_JaffaCakes118.exe windows:4 windows x86 arch:x86
c22d1f698ed886e6f29d6405a3cd6a04
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
MessageBoxA
kernel32
LoadLibraryA
Sections
.text Size: 1KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 162KB - Virtual size: 162KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE