Static task
static1
Behavioral task
behavioral1
Sample
08c0ca5c7a145f2ab1d817cb9497d1e7_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
08c0ca5c7a145f2ab1d817cb9497d1e7_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
08c0ca5c7a145f2ab1d817cb9497d1e7_JaffaCakes118
-
Size
368KB
-
MD5
08c0ca5c7a145f2ab1d817cb9497d1e7
-
SHA1
a43727dfad1721b33b7543fe6895b32101c35aca
-
SHA256
38831f32c1d824aa8a2c77a9f7731ec92732d6e6407fd3b984f18f203fb139a9
-
SHA512
6ef5d2b7df3fcaa2f7a3e9e26c58efbd4194ddd1d8ec1272df55c0c79d41f0e8f7ce13087a002f77522035141553a4595cf124fabdd4869e5c4dad3bc3e6c68f
-
SSDEEP
6144:F+ZpclA4kUrIPyMTDEwhdHe3BGdUZX1WIqgqwxVOSfGW6xfdYR8JY/wmxc1QvGmo:F+rclANyIjTgwb+AdUzBqoPfGbRi3/wT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 08c0ca5c7a145f2ab1d817cb9497d1e7_JaffaCakes118
Files
-
08c0ca5c7a145f2ab1d817cb9497d1e7_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: - Virtual size: 644KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 7KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 20B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 35B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pupu Size: - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MaskPE Size: - Virtual size: 10KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.Mybr Size: 367KB - Virtual size: 368KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE