Static task
static1
Behavioral task
behavioral1
Sample
82f7441816a0c2a1160dcb3aa07a0da8_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
82f7441816a0c2a1160dcb3aa07a0da8_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
82f7441816a0c2a1160dcb3aa07a0da8_JaffaCakes118
-
Size
1.0MB
-
MD5
82f7441816a0c2a1160dcb3aa07a0da8
-
SHA1
d8605be65b8eaeb5b75ae139574626472dd30162
-
SHA256
6f3a7b78fa6dd1c5ed9bc7c7d24e840ee9b465c11dbd37742a4e8fbe4435d2cd
-
SHA512
408bf679311903e45306f5d0995a47714e528f806dffaa3d67cbb3f3b699d5ddb9f5d65add3e6672f91d698ec39c3ec692ff3c36f2313c4fe28f5eccf168162b
-
SSDEEP
24576:14jpYUdflSFc95UDkD0R+ehwL3m4J1PWTJ7hgJSVjR/7fpk8aTM:14jTdYFc9iDlR+UE24mTJ9WSV1nQM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 82f7441816a0c2a1160dcb3aa07a0da8_JaffaCakes118
Files
-
82f7441816a0c2a1160dcb3aa07a0da8_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ