Static task
static1
Behavioral task
behavioral1
Sample
8684c64ca8366f8175c98984d256aa93_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
8684c64ca8366f8175c98984d256aa93_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8684c64ca8366f8175c98984d256aa93_JaffaCakes118
-
Size
620KB
-
MD5
8684c64ca8366f8175c98984d256aa93
-
SHA1
9b51f994f253c7e43b5a781b41f144d3e78b33d5
-
SHA256
a50ba8a531ad5132347676d84888c9bf707d0e704520c5cd3007427e392ad714
-
SHA512
65f53d1d630d632c6afe6ac1911bf718635d13599844d51f2073a9af762146cb3e0aabe8323057e836f3e7f1c19f87432ea25830649e9a61b62e2bca79d7713b
-
SSDEEP
12288:Xig4pU0c8WoT/W9agein+SPxQSgh0LDL+X2okIpEbVdx:X0pU0co/W0gpndPx4CLk2Fx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8684c64ca8366f8175c98984d256aa93_JaffaCakes118
Files
-
8684c64ca8366f8175c98984d256aa93_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 3.0MB - Virtual size: 3.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ