Static task
static1
Behavioral task
behavioral1
Sample
8d6fdddb212444662a5107c222b89837_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
8d6fdddb212444662a5107c222b89837_JaffaCakes118.exe
Resource
win10v2004-20240426-en
General
-
Target
8d6fdddb212444662a5107c222b89837_JaffaCakes118
-
Size
52KB
-
MD5
8d6fdddb212444662a5107c222b89837
-
SHA1
ba41d7d0fe8d6d8831f58282760d39c05311961d
-
SHA256
797c6c344a8fa78d58f08414af706d6722ab72a3fd8a89e7ba5094889504326e
-
SHA512
0e6fb7575b05bacf58712cd5a7ce9911e195c10891792712095e7298efe848b5a022ad548326f09fa5ec922f75771a127baa9e048af8b3e5744d7412bf3c1c9c
-
SSDEEP
1536:44UTHZEEEEEEEEEEEEEEEEESFIIIIIIIIIIIIINCrrrrrrrrrrrrru3NJX9Oxm:fgS3NJXg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8d6fdddb212444662a5107c222b89837_JaffaCakes118
Files
-
8d6fdddb212444662a5107c222b89837_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 20KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ