Static task
static1
Behavioral task
behavioral1
Sample
08268c8ce4a7c0bf18a243ae8b4aa8bb_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
08268c8ce4a7c0bf18a243ae8b4aa8bb_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
08268c8ce4a7c0bf18a243ae8b4aa8bb_JaffaCakes118
-
Size
105KB
-
MD5
08268c8ce4a7c0bf18a243ae8b4aa8bb
-
SHA1
2f87e6a2aba0a4c0b34d503701791509b9d5f7ea
-
SHA256
97a9978785cfcd424e3764a36d6b89f4e682a61e61fa40dc52c90165ed46a483
-
SHA512
c120c8749dce9d607ea9145627c755048a9aa32e355c7d2eab5a80f2d3742646595b4fa07bffe26a5adbd96b30319122c8388e1d95bac5fc626bca1fc8e85ff9
-
SSDEEP
3072:7OtREnlpVyaQRGjlkBbM2lt1zV6DvHiZ2+9RcYF7:7OtWtZ3jij6HiRRd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 08268c8ce4a7c0bf18a243ae8b4aa8bb_JaffaCakes118
Files
-
08268c8ce4a7c0bf18a243ae8b4aa8bb_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
of Size: - Virtual size: 196KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
tiqndmg Size: 100KB - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
58bbmzus Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE