Static task
static1
Behavioral task
behavioral1
Sample
8503418350b9e81642e2c86df5e2b577_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
8503418350b9e81642e2c86df5e2b577_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8503418350b9e81642e2c86df5e2b577_JaffaCakes118
-
Size
50KB
-
MD5
8503418350b9e81642e2c86df5e2b577
-
SHA1
6b9aad759061b47ef14342239f0eb0cb81230fca
-
SHA256
cecc994fe1e1ce5088b35da9720dcd03058ce37c5cc731508e2d8f6dd5928a8a
-
SHA512
42ae8571639b0e78afd6420811cd35ab015e774bd8ae4a38997e5e354e22cff7170402946c073a1c56668a4b3e6e102e328942d4ee646575ae8fcdafe5496b79
-
SSDEEP
1536:g/+1KMniUVaXeLS3DIu86RgHvyMTfyfJ3:g21KMWOLS3Eu86RgHaM7MZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8503418350b9e81642e2c86df5e2b577_JaffaCakes118
Files
-
8503418350b9e81642e2c86df5e2b577_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
tzkx0 Size: - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
tzkx1 Size: 49KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
tzkx2 Size: 689B - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE