Static task
static1
Behavioral task
behavioral1
Sample
08a5ffb49007843ec9d1b0cdd233855e_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
08a5ffb49007843ec9d1b0cdd233855e_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
08a5ffb49007843ec9d1b0cdd233855e_JaffaCakes118
-
Size
114KB
-
MD5
08a5ffb49007843ec9d1b0cdd233855e
-
SHA1
8b76e7b82b0d52927c9678cc06627332d1fa110d
-
SHA256
fc7cd033c7d7f40696659bf4f22f3c99a7745d89d055f4fc7180badf5e9d0b9a
-
SHA512
72e5c65bc89c7bb2b438eec0e3a125a2bb8ef71ec00a2f90d51c5f2b77bfeac0d87b535e2ecc8dc836c0ce8bbada89a4eb174ada8cfd410baf444437e8b1dc49
-
SSDEEP
3072:TgvTqTPSA8AnwHSCGxy76EfH/GGLj2lOq:0vePSFAnol3ffTKA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 08a5ffb49007843ec9d1b0cdd233855e_JaffaCakes118
Files
-
08a5ffb49007843ec9d1b0cdd233855e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
yedp8 Size: - Virtual size: 88KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
qf Size: 108KB - Virtual size: 112KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
w Size: 4KB - Virtual size: 618B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE