Static task
static1
Behavioral task
behavioral1
Sample
8cb4a6d787de657d6c075bc28ba66a6c_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
8cb4a6d787de657d6c075bc28ba66a6c_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
8cb4a6d787de657d6c075bc28ba66a6c_JaffaCakes118
-
Size
1.3MB
-
MD5
8cb4a6d787de657d6c075bc28ba66a6c
-
SHA1
fe8ec35fde027797dd8b6c03e56e220f5bb2d4b0
-
SHA256
0e2d230bbc71ad24b7e74eb9d57fc7562358891b194ffa322fc713dda8c3fa60
-
SHA512
d9651c3fd202745e0ced6ee4b70fabfddc46b57db2d161f0a9ed239909e30dd7bb1ed1b4d842220d0dfc0b676e0133385501cb181b41323dec8beebbd4e4e71d
-
SSDEEP
12288:Sf61NRg4WEk3/JefbEhyR0mN+u1wc/fT0/tk9mvYSutdnwgSQgB1tB5sap8j2c6Q:OBeAUN+u1wA4/WYvTkHSQqtB5sKL1eX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8cb4a6d787de657d6c075bc28ba66a6c_JaffaCakes118
Files
-
8cb4a6d787de657d6c075bc28ba66a6c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 576KB - Virtual size: 575KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 84KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 332KB - Virtual size: 339KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 312KB - Virtual size: 310KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ