Static task
static1
Behavioral task
behavioral1
Sample
08294fd0aa5014b721f8710c12e98d25_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
08294fd0aa5014b721f8710c12e98d25_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
08294fd0aa5014b721f8710c12e98d25_JaffaCakes118
-
Size
379KB
-
MD5
08294fd0aa5014b721f8710c12e98d25
-
SHA1
596e839fbc3a44a60fa10091fc517c36e8d7cb7e
-
SHA256
c7c9726c8d0c2b1686d7eaaf46e7e27102bf6314251df1408e618e1fb8a108e8
-
SHA512
436ce14aae3af1886e7a3c491d7b2bd9e922040a71ebfd43dab861c8a2dd7999b029d98831b10a0dbdd46ec30f37757c6aeb6d1fb78777d037fc9e9785562f67
-
SSDEEP
6144:ke7XqbqDjyVKfYNbhHAmU6DkN1BB7s0UGCJ2RPC/HTwKUReA1OKRhX41RAvIsJvI:57XBI+mils0xU/H7UAA11RNqRAvLWP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 08294fd0aa5014b721f8710c12e98d25_JaffaCakes118
Files
-
08294fd0aa5014b721f8710c12e98d25_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
HMsr Size: - Virtual size: 9.7MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
HMsr Size: 374KB - Virtual size: 376KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE