Static task
static1
Behavioral task
behavioral1
Sample
08568c8d07ad85db7469cacda7610831_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
08568c8d07ad85db7469cacda7610831_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
08568c8d07ad85db7469cacda7610831_JaffaCakes118
-
Size
681KB
-
MD5
08568c8d07ad85db7469cacda7610831
-
SHA1
af94693fd806de3eb17ca1239f0c8481ec6bda93
-
SHA256
95c1246cded41887e73a7ac400bd19d061661129d9309b62429483ea4f38bc53
-
SHA512
601082c8bf5a9acc91e2d3f4c0569373630d569c99a50e1642c70a8a2b08113d42cb0619f603f601a4d0fe4826046e3e65d54bb96ea788e76f52e29f175043c7
-
SSDEEP
12288:0lN3P5UgREyvmJj0BBVO49QijpMU2b8RpOiZ4sGaR4CSSaU6of:k/5tqSmJj0HVO4+4Mhdiy2mCp2s
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 08568c8d07ad85db7469cacda7610831_JaffaCakes118
Files
-
08568c8d07ad85db7469cacda7610831_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 928B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
36540232 Size: 624KB - Virtual size: 632KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE