Static task
static1
Behavioral task
behavioral1
Sample
8247ad7b23a8fdfcc716a5dcf75ca845_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
8247ad7b23a8fdfcc716a5dcf75ca845_JaffaCakes118.exe
Resource
win10v2004-20240730-en
General
-
Target
8247ad7b23a8fdfcc716a5dcf75ca845_JaffaCakes118
-
Size
161KB
-
MD5
8247ad7b23a8fdfcc716a5dcf75ca845
-
SHA1
61fae2224187d07e80e0e242ac20a2b2bec8098c
-
SHA256
932ed0af6b60cf5fae54f94e0f1b3cbfadfb12018047fa6aadffe44e658eb19c
-
SHA512
2650b391a56fd545119ec86898664df7214b6dd7c8b7b7a3d39f84d142d96d0a499c5ee33d5631e0dbe4d4e9263d2f1f66eb0d3d492d62bf739135c5d644b3d4
-
SSDEEP
3072:p1JxwXQ6GxHyFA0jegw9i5NtiFIcLtl2992+7VOw9O5CUyiet7dEf:p/xcvGxoYxOtPwPJ+7VOwFBte
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8247ad7b23a8fdfcc716a5dcf75ca845_JaffaCakes118
Files
-
8247ad7b23a8fdfcc716a5dcf75ca845_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 144KB - Virtual size: 143KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ