Static task
static1
Behavioral task
behavioral1
Sample
bc4f0abd91236957afd11493b9df990f_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
bc4f0abd91236957afd11493b9df990f_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
bc4f0abd91236957afd11493b9df990f_JaffaCakes118
-
Size
211KB
-
MD5
bc4f0abd91236957afd11493b9df990f
-
SHA1
6afee4f8ae3503215e70b60cfdf713a00b0888a7
-
SHA256
0b4ef032a96e3b0becd50cb5bc820969862d2e91dcde528eef28ce795ac8c44e
-
SHA512
12aeddb7e1e7cad40b7c49554927c981d7a244e2bfe9d24742c3371013d46d8d3ada0031b9234d643f7a4883932897da1263ae17e10faf341c25d58d7ef18ff9
-
SSDEEP
6144:lkU4w88tHKhlhZkHqeXX8o3UmEjVe5dHSl:ltM8l4wk1+Bq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bc4f0abd91236957afd11493b9df990f_JaffaCakes118
Files
-
bc4f0abd91236957afd11493b9df990f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
4VK0 Size: - Virtual size: 116KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
4VK1 Size: 203KB - Virtual size: 204KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE