Static task
static1
Behavioral task
behavioral1
Sample
8c21cc7291015d3ad19fbcbd1c9abd4c_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
8c21cc7291015d3ad19fbcbd1c9abd4c_JaffaCakes118.exe
Resource
win10v2004-20240419-en
General
-
Target
8c21cc7291015d3ad19fbcbd1c9abd4c_JaffaCakes118.exe
-
Size
849KB
-
MD5
8c21cc7291015d3ad19fbcbd1c9abd4c
-
SHA1
1d97f6fef6d7f991ed53360ab0a32ab886a0ff84
-
SHA256
89c9f7855853545de2008ae9f069f43db00859e8ba9c95b2125ac847a979e8ac
-
SHA512
ea0a036514392ed3f013f0098d7746236e0dadbdaf4f0d64617f95da7504f5e682b7c6a3c69802730d079138c0023d62c7daff111a3d1e23bb6e07429c1adcec
-
SSDEEP
12288:lXa8sswaTA/jQu9QwpTofrzAcoPs02afWraukGE2OafC8Uep+56IqtTppAyu75Lc:lq8Pw3jQu9Qhfrzn02xr73fZ3+8TFuq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8c21cc7291015d3ad19fbcbd1c9abd4c_JaffaCakes118.exe
Files
-
8c21cc7291015d3ad19fbcbd1c9abd4c_JaffaCakes118.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
HWAxCMck Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DrtWJgcR Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�� Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE