Static task
static1
Behavioral task
behavioral1
Sample
08471a7b4e058b99fdb08d11b130e104_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
08471a7b4e058b99fdb08d11b130e104_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
08471a7b4e058b99fdb08d11b130e104_JaffaCakes118
-
Size
1.1MB
-
MD5
08471a7b4e058b99fdb08d11b130e104
-
SHA1
948fbfbf184e4795ed0f001281d19021812f32d1
-
SHA256
1ddd310a0eab56daedac66b8cb98c94d3e48404fec75f1b5fc3cfcac40387cf0
-
SHA512
7c77797fc51a7dcc98b8e9dec62aae72488aafd8d267e534d530bad20b3bd6425c551d5ae410f89bb96495358a5a6490c66f55fc78eab1c4f62e86e34a3721b1
-
SSDEEP
24576:CAHc3vQI6IiJ9ymdMMDmVbcyPpylSEhBKw6pN2+HLJzhyX6f:MliJMoMOqbcyQNKRphvf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 08471a7b4e058b99fdb08d11b130e104_JaffaCakes118
Files
-
08471a7b4e058b99fdb08d11b130e104_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 115KB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.udata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE