Static task
static1
Behavioral task
behavioral1
Sample
80d01bac3fe127c9cfc849dbfcfc9dc6_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
80d01bac3fe127c9cfc849dbfcfc9dc6_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
80d01bac3fe127c9cfc849dbfcfc9dc6_JaffaCakes118
-
Size
8.0MB
-
MD5
80d01bac3fe127c9cfc849dbfcfc9dc6
-
SHA1
87b75857c3586cd71b4d0427b5559e83b6c8cfaa
-
SHA256
57089fc0ba9a244768cb8b45022f80e8b0fad95271d7136b205fd861cce7d47a
-
SHA512
9df4fe3dabddf1f398d2d627adc1cd0f82bf53429c03c0ef97b1d1001ff616d560dd9ccf805b6f5798df2cdf302be67197ed97e257093eb72dee2be7a4ceeea5
-
SSDEEP
196608:OgXn9NE6JWXMUAFlHDwHmT7vwcPBeWFb0aIJ3m8Bb+j:OgXnbEWp/vt5eWUNm8VU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 80d01bac3fe127c9cfc849dbfcfc9dc6_JaffaCakes118
Files
-
80d01bac3fe127c9cfc849dbfcfc9dc6_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 64KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ