Static task
static1
Behavioral task
behavioral1
Sample
bfdc16a473d4bd58a8c7ce5f6e58f83c_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
bfdc16a473d4bd58a8c7ce5f6e58f83c_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bfdc16a473d4bd58a8c7ce5f6e58f83c_JaffaCakes118
-
Size
182KB
-
MD5
bfdc16a473d4bd58a8c7ce5f6e58f83c
-
SHA1
6f5370c1129d9f067e51e105e8c18f8488351969
-
SHA256
1bfbc597cced7de697761be5031e58532a48e5a75278c082a320a370b8db7b3d
-
SHA512
95c0d6513e4a86b0a4ff9d8c287eaac853c644a78010f049449ca2df09c4a32040c0f87490925fde95379902c751a3e7b0137e8131463864364356eb26a15059
-
SSDEEP
1536:DoEzKVKV7Zy1/1uaLSR6xumQ5KmGnO9NsaQ7Majout+e1D0SNOJH7q0Z4BP:DoEe/1C6xV3mGnO927SEPD0TH7q0Z4B
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bfdc16a473d4bd58a8c7ce5f6e58f83c_JaffaCakes118
Files
-
bfdc16a473d4bd58a8c7ce5f6e58f83c_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 178KB - Virtual size: 177KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ