Static task
static1
Behavioral task
behavioral1
Sample
8751932c3410b4797ba804ef9dc66bd4_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
8751932c3410b4797ba804ef9dc66bd4_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8751932c3410b4797ba804ef9dc66bd4_JaffaCakes118
-
Size
183KB
-
MD5
8751932c3410b4797ba804ef9dc66bd4
-
SHA1
abc04f3f516baea067b4c1deea80a18599878baa
-
SHA256
46c35ebc3a2f8c80eb3c20bc013c4e4eb047898016b834e1265a55a59de0881d
-
SHA512
dc5be7f62f8526c5bb48c32573d78736ad92305b00c0802544a64c09de304918455dfc1b487151ca0039917bd9d9d9a0bbb23e4fe0463fe89da1bf552549eec1
-
SSDEEP
3072:epTG1EwbQBpdKKG5MRISjVsWB/QAH3cSS1U4X01jyVS38vDxSX+l1fNvwirQZSAi:mFwbCdLG59i9LlSa4Iyk3aIX+jJwisZU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8751932c3410b4797ba804ef9dc66bd4_JaffaCakes118
Files
-
8751932c3410b4797ba804ef9dc66bd4_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.iota0 Size: - Virtual size: 816KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.iota1 Size: 216KB - Virtual size: 220KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.iota2 Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE