Static task
static1
Behavioral task
behavioral1
Sample
8593ed7e85c303346ae5e275abb4ab19_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
8593ed7e85c303346ae5e275abb4ab19_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8593ed7e85c303346ae5e275abb4ab19_JaffaCakes118
-
Size
2.6MB
-
MD5
8593ed7e85c303346ae5e275abb4ab19
-
SHA1
7c2de7a5ef39b8c0d2d33c1e24e096da2198cf50
-
SHA256
5080985dbf2990169510d1ac8ebb41b0c6c68c57607fea11369b8b17f6c3d09e
-
SHA512
c13886fef2107e4e0d8fad87ebe9ed7bb455723d103c815de8a847a4356ca6b2203c1f8f732cf2a4037f0d00cf5ee8083bf13cfcd9d3a5c7bdb2431631b38e63
-
SSDEEP
49152:xp0zQ34wNuC/V7KRvykiM+lLibxWT1WfLi1PlNfBNP5mJCLMUBtbB:xmw4C/VmRKWxDf2H/5WFk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8593ed7e85c303346ae5e275abb4ab19_JaffaCakes118
Files
-
8593ed7e85c303346ae5e275abb4ab19_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 390KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 5KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 8KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1.5MB - Virtual size: 13.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 104KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 2.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 652KB - Virtual size: 656KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE