Static task
static1
Behavioral task
behavioral1
Sample
8c0e63025d55baa4d10ff4dacf3a95a1_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
8c0e63025d55baa4d10ff4dacf3a95a1_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8c0e63025d55baa4d10ff4dacf3a95a1_JaffaCakes118
-
Size
104KB
-
MD5
8c0e63025d55baa4d10ff4dacf3a95a1
-
SHA1
ca51d3f29f02fb79276dd98467f61dc62d618003
-
SHA256
87de03a8a0ec44e3d97f5b6ff25758fbb933f9366b231042ab7ae13fd045b0d7
-
SHA512
c019d5687ac017ba9374c3a8f9b2279caeb11f7bde21c5a477973f2ffa6188ea8a2adabf3e325fb78fe55ceae890bf2e4b81d0da0932576a4ee8b0a304d3306e
-
SSDEEP
3072:yQ9le3Vk0f8jxWa2oRE9kyb5OJiok9BQdM9z:3e3JixxkOgokao
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8c0e63025d55baa4d10ff4dacf3a95a1_JaffaCakes118
Files
-
8c0e63025d55baa4d10ff4dacf3a95a1_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 58KB - Virtual size: 57KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 2KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 240KB - Virtual size: 239KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ