Static task
static1
Behavioral task
behavioral1
Sample
bff3b212e16ca4eb2f0ed0d863343fa5_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
bff3b212e16ca4eb2f0ed0d863343fa5_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bff3b212e16ca4eb2f0ed0d863343fa5_JaffaCakes118
-
Size
455KB
-
MD5
bff3b212e16ca4eb2f0ed0d863343fa5
-
SHA1
e673d610246b080fb7c313e3e18b5616d545ace6
-
SHA256
49fc2151d0c9f49800422102af9769e9c40cae42043a2f27acde999334ac0389
-
SHA512
f6ddfa7b8db0de9a5a05b9ecb26b6bce092500b7d919934a7e4306f2b4da7be48e5fe9f35913d971a914ed65ae47bae8142401cb3cca1d3b33771e91cedf656c
-
SSDEEP
6144:HeUjsnrOjjfugJxRcreZsrUzKZbKxsn+aCP0vdZhhL0MTT3Mfu0FDiNtNT:+U4KHplc0iNRWPCZHB7KurNtNT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bff3b212e16ca4eb2f0ed0d863343fa5_JaffaCakes118
Files
-
bff3b212e16ca4eb2f0ed0d863343fa5_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 97KB - Virtual size: 188KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 18KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 148KB - Virtual size: 148KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.hjdfgdf Size: 183KB - Virtual size: 184KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE