Static task
static1
Behavioral task
behavioral1
Sample
82e8f35308b9fd9a6e3ecbb169b1882a_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
82e8f35308b9fd9a6e3ecbb169b1882a_JaffaCakes118.exe
Resource
win10v2004-20240730-en
General
-
Target
82e8f35308b9fd9a6e3ecbb169b1882a_JaffaCakes118
-
Size
963KB
-
MD5
82e8f35308b9fd9a6e3ecbb169b1882a
-
SHA1
45d725f8342e9d9f1724ba1d80dcdca589890c23
-
SHA256
0e31d8124cd1eb2fff895ab84581e20c62b9a8f2437422935f86e497d50bc0ab
-
SHA512
c31d97d490be734373529f2f07a2d94b6d33838e1377498606416ee2104444449b554ae9ddfc004ec83a9eacad178d92a45d79d0370388f667829216aedd06ae
-
SSDEEP
12288:8FbTYIftgQn4P1KoFj1Ke/jCojDC/hvQqcLlXHQRd/qRsB:k4drjDIhvqZCdfB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 82e8f35308b9fd9a6e3ecbb169b1882a_JaffaCakes118
Files
-
82e8f35308b9fd9a6e3ecbb169b1882a_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 9.7MB - Virtual size: 9.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 289KB - Virtual size: 289KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ