Static task
static1
Behavioral task
behavioral1
Sample
8764c2568f47b3c0b2c4540feb8126c9_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
8764c2568f47b3c0b2c4540feb8126c9_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8764c2568f47b3c0b2c4540feb8126c9_JaffaCakes118
-
Size
276KB
-
MD5
8764c2568f47b3c0b2c4540feb8126c9
-
SHA1
5f66e4a11f8d37fd3e1661bad61e59fefc09e228
-
SHA256
a8159d7369494d5b374db80fa42dea2ad065437d02c261731b48edba73afc174
-
SHA512
bb38b2a36aff9eebb94170cae65e3f1c6c6314f5c7198e90b469fc6c8a55d103ac5e78fce928c1c15987be3496484615886fca6e0c7e60fac1f42a373c05c8f6
-
SSDEEP
6144:VPxWpJC+U4nDWgRAkPyMJ4GQn8xID0DMFPXGIDlG8Qf/v/3:VOC+NR3PyBGLxe0De7D5QfX/3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8764c2568f47b3c0b2c4540feb8126c9_JaffaCakes118
Files
-
8764c2568f47b3c0b2c4540feb8126c9_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.textbss Size: - Virtual size: 289KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 259KB - Virtual size: 260KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 452B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ