Static task
static1
Behavioral task
behavioral1
Sample
08d6856d40603efa04388fd971ccd82a_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
08d6856d40603efa04388fd971ccd82a_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
08d6856d40603efa04388fd971ccd82a_JaffaCakes118
-
Size
560KB
-
MD5
08d6856d40603efa04388fd971ccd82a
-
SHA1
4d19e03da2f61f3079840427ebf78a84b935be24
-
SHA256
1e326abcd92459bb43e01e9b2ec8c4910101bb03dff95b5addf4a3ea2b1b6742
-
SHA512
cf0444d3218478e793b8342a789d701b48ecee5c21b636255e54d69569ae1e89a58ee5d5397e573e16611af23081b56c4c89aa35822299b0710c0f5ee9af6d04
-
SSDEEP
12288:vkzFuwfR3PPAGLxe0DWQMjPPkiPtdWSLlGm8YjwOOwp2MELEZQ:vshR3PPPx7DWdj3kMrLlKYjl7Eb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 08d6856d40603efa04388fd971ccd82a_JaffaCakes118
Files
-
08d6856d40603efa04388fd971ccd82a_JaffaCakes118.exe windows:0 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
ERTc1TT5 Size: - Virtual size: 662KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
mjokENel Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
SFIaU8H6 Size: 549KB - Virtual size: 552KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
20fQwnFZ Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
67j34SbR Size: 24B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
9yX2wn57 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
YvazRMcf Size: 24B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ