Static task
static1
Behavioral task
behavioral1
Sample
8580eae215df6462fc4c1d229f74f4f5_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
8580eae215df6462fc4c1d229f74f4f5_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8580eae215df6462fc4c1d229f74f4f5_JaffaCakes118
-
Size
63KB
-
MD5
8580eae215df6462fc4c1d229f74f4f5
-
SHA1
5d82e8e4907844326de75b646faae45415b0cf30
-
SHA256
9812fb80d6ff0884502cef4ed2ea5c16ef80a3fadeba996e3b3f712d64ccc279
-
SHA512
14d7b7b414ae8066f6d9a1de8cdc4e367151db9d270c70b90989e7cb8145f34c0ad9d4851d4a96675069a3969c87f6978439a4e970f9dd96547e15f5969c9539
-
SSDEEP
1536:tpxO0bWPDBlExL5GWEypv39ow7mk6p68fBMJ:trOCWPfEp4XypFmkiZJMJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8580eae215df6462fc4c1d229f74f4f5_JaffaCakes118
Files
-
8580eae215df6462fc4c1d229f74f4f5_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 340KB - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 47KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE