Static task
static1
Behavioral task
behavioral1
Sample
8653d48357cb2a0bc961227278850dd0_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
8653d48357cb2a0bc961227278850dd0_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8653d48357cb2a0bc961227278850dd0_JaffaCakes118
-
Size
80KB
-
MD5
8653d48357cb2a0bc961227278850dd0
-
SHA1
556922bf1425dd728255efd1a1977d9f8cb784a2
-
SHA256
9468050c5f097f8c12c8c687335c95a4b0d079bbb3d8d96cd1d330de84c1bbae
-
SHA512
7b606ac0303e0cc99b2f9021140c53ef6d458151f90c9e47cbfa764aace8ce13e8c4eb1436538184639035da29b97e86c4b26fc5b7ca5b7f9fc3cdfce66484b4
-
SSDEEP
1536:/cZq4h4RBfWqeCMD8T6KMakCWstoaYe2EGC7FIKRJzZgzc:UA4hsBf/08qHRKVRTgzc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8653d48357cb2a0bc961227278850dd0_JaffaCakes118
Files
-
8653d48357cb2a0bc961227278850dd0_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
dadedade Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
dadadada Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
dededed Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
dedadeda Size: 14.0MB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
fefefefe Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE