Static task
static1
Behavioral task
behavioral1
Sample
8359c247596f234e0980e20ec6085d42_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
8359c247596f234e0980e20ec6085d42_JaffaCakes118.exe
Resource
win10v2004-20240730-en
General
-
Target
8359c247596f234e0980e20ec6085d42_JaffaCakes118
-
Size
165KB
-
MD5
8359c247596f234e0980e20ec6085d42
-
SHA1
e4f705e5b942108de33a770d05fe54935d3d864f
-
SHA256
e98a2037fe12d9052b0902ab3c587425c5739c251873f98f2ae4c0f0165eb8bf
-
SHA512
22ccec057bd466b1274303e52780c60fd7edfce77cae95e6b5fc2d44e7cb7cb68290898e9d302c8e690f5b2dd95168e2be658940effea482a6b6bf398f34f64f
-
SSDEEP
1536:TPrFTkL7RsNLCNMSG5+SUdqeHAQWXZaNwRRczNoU1LbLkOVPqQ:LrhkBaZLBRWhlLfB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8359c247596f234e0980e20ec6085d42_JaffaCakes118
Files
-
8359c247596f234e0980e20ec6085d42_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 141KB - Virtual size: 141KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE