Static task
static1
Behavioral task
behavioral1
Sample
bfed1a7d40ffe7785f5d0eb2a071738d_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
bfed1a7d40ffe7785f5d0eb2a071738d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bfed1a7d40ffe7785f5d0eb2a071738d_JaffaCakes118
-
Size
131KB
-
MD5
bfed1a7d40ffe7785f5d0eb2a071738d
-
SHA1
ea43fe8e506d4f15d2c8cc374983e0b0e2806d08
-
SHA256
79386dad502765312465e8b5aea242ba8d08a5c86b92aa8ce17a949dcdb881b1
-
SHA512
0e13a9ccfe2e5577aea7fe1a8f8757dda8c89db28702e463dbd6a599885caf41dd10f920fa782d6c7da90fb1d73284630929a0a8c1de47064228e7b8e4b2e74f
-
SSDEEP
3072:+csLPPAyhXawOUSVdj1U/lGKLbfX3/g1eLtCg:OLnAyXSr16GAf39ZCg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bfed1a7d40ffe7785f5d0eb2a071738d_JaffaCakes118
Files
-
bfed1a7d40ffe7785f5d0eb2a071738d_JaffaCakes118.exe windows:4 windows x86 arch:x86
99fc69d43b9cd9fe874a0947318e4eef
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
Process32Next
Process32First
CreateToolhelp32Snapshot
TerminateProcess
OpenProcess
GetProcAddress
LoadLibraryA
Sections
.text Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rawdat Size: 116KB - Virtual size: 120KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE