Static task
static1
Behavioral task
behavioral1
Sample
8c1680d7c247565cb1b7e1f4a565b937_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
8c1680d7c247565cb1b7e1f4a565b937_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8c1680d7c247565cb1b7e1f4a565b937_JaffaCakes118
-
Size
1.7MB
-
MD5
8c1680d7c247565cb1b7e1f4a565b937
-
SHA1
d37b366345613dd448ec94a290e487f30352d025
-
SHA256
8b973f38daaf5da6ba254a97ffda82d758b0aade4b33cff335286c206e9e5694
-
SHA512
aa0ecddd8a6192ea38c5c8b78fea04888215bd9691480b5ebf8b75a0873e7334b104aa7ab95561c64af4ad3d08eb819037eb9515d2b1b7362ba28eda10713b62
-
SSDEEP
49152:HRNseRIRjmkzgzoQfJN4ksJoQfJN4ksj5:f+RjxkouQ7JouQ79
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8c1680d7c247565cb1b7e1f4a565b937_JaffaCakes118
Files
-
8c1680d7c247565cb1b7e1f4a565b937_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 1KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 22KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.coze Size: 548KB - Virtual size: 552KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.config Size: 124B - Virtual size: 124B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE