Static task
static1
Behavioral task
behavioral1
Sample
8acba05234cbabff972a8c91b7a62779_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
8acba05234cbabff972a8c91b7a62779_JaffaCakes118.exe
Resource
win10v2004-20240426-en
General
-
Target
8acba05234cbabff972a8c91b7a62779_JaffaCakes118
-
Size
120KB
-
MD5
8acba05234cbabff972a8c91b7a62779
-
SHA1
698c3a47170218d7d195a1e476c3bd0cb1515409
-
SHA256
b7ff1409899f2c72df8e483955fd995a790eeef56e5ae480c4360847a61c004d
-
SHA512
39662e06f366ab5d964f826fc7e68936cbb0884fda493fe66c72185b4846d41a03a742ea95bb0cb2f72bd072ca2cf6b6c76edfe9b4d120a6d6fff099d584fe07
-
SSDEEP
1536:XQTn0wl/OafgxKfi9ts4ALNPnTK5UU15WSIiRaEUsXxTT:XMnHlWa4Ia9YNrKWUmMR0I
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8acba05234cbabff972a8c91b7a62779_JaffaCakes118
Files
-
8acba05234cbabff972a8c91b7a62779_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 48KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 64KB - Virtual size: 62KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE