Static task
static1
Behavioral task
behavioral1
Sample
8c379b75e7deee1ab9ad18273af92bf8_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
8c379b75e7deee1ab9ad18273af92bf8_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8c379b75e7deee1ab9ad18273af92bf8_JaffaCakes118
-
Size
411KB
-
MD5
8c379b75e7deee1ab9ad18273af92bf8
-
SHA1
2a5f8555fa9e2d3a2698e05f3ddc7e7d641d8227
-
SHA256
e4863dacf8dcb10d0eaf0c7d0ddfdb25596cf4d2d674f174dbd02f86a6f0458e
-
SHA512
2ea74d72282d793a82c5e061ee34fd98838f86b5d87a68ca48047568a2125dd062acdff02ca6d3ceb800375ff8a5e05c453d352cf34ba2c5fa704885f22ab83a
-
SSDEEP
3072:B1lxM4LNfO9zs+xJo6zzmqvaMNHkH3h4np3qlxM4LNfO:BtLsznxJQve83h4J6L
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8c379b75e7deee1ab9ad18273af92bf8_JaffaCakes118
Files
-
8c379b75e7deee1ab9ad18273af92bf8_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
CODE Size: 139KB - Virtual size: 138KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 131KB - Virtual size: 131KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 125KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ