Static task
static1
Behavioral task
behavioral1
Sample
08cd3130520dfa1755beb40f8cf50b20_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
08cd3130520dfa1755beb40f8cf50b20_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
08cd3130520dfa1755beb40f8cf50b20_JaffaCakes118
-
Size
14KB
-
MD5
08cd3130520dfa1755beb40f8cf50b20
-
SHA1
ec770d041b5a8309d82ddc8d40ea0757aae0f54b
-
SHA256
27aad54ecb38cd102f1998ec27744c8feffccb2f7f70476a40b0adea33a521f9
-
SHA512
9f7475bba0d39fa06d14553692711078ac200d7f0938fcaf2a4d227652a2be1ec48a7097725f852341e0d7b0ad0568131a879e3e37204af297676dd4e7eca2b8
-
SSDEEP
192:IYkYKyi+GHFZQGlG8b0VkjWaiS+pEEH6R/AYWmhxSr8XtavdtYKqObnE8GGJkgUm:IYpKyi3FZl0VklR5AYWmb1tcifOGCV7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 08cd3130520dfa1755beb40f8cf50b20_JaffaCakes118
Files
-
08cd3130520dfa1755beb40f8cf50b20_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.Upack Size: - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE