Static task
static1
Behavioral task
behavioral1
Sample
8572e1724de706d2a372c47b8b4f7fc3_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
8572e1724de706d2a372c47b8b4f7fc3_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8572e1724de706d2a372c47b8b4f7fc3_JaffaCakes118
-
Size
60KB
-
MD5
8572e1724de706d2a372c47b8b4f7fc3
-
SHA1
43c1c53f8a36749158f4c603c05781951bcc9b4c
-
SHA256
61949d14a90b761f28d1ada69f13f5f3e1cd5d814932ccb7a28ed5abd4d50ec6
-
SHA512
40270a6db99dea4655f4bed57b77652fede88fc74a599cd8e70c60cd83c7f808aeaf19a85e2212455a36bdf992a8c530faf030b1b13fb730e54b35f9eb1dc92f
-
SSDEEP
1536:1/WUJ72neVrM27qILmy+oZ82uLGIG4zH9:1//JzVrv7qIn7ZVoiO9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8572e1724de706d2a372c47b8b4f7fc3_JaffaCakes118
Files
-
8572e1724de706d2a372c47b8b4f7fc3_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.packed Size: - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.RLPack Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE