Static task
static1
Behavioral task
behavioral1
Sample
8c3b9ff3e295468b1e7da7cb1af51e51_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
8c3b9ff3e295468b1e7da7cb1af51e51_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8c3b9ff3e295468b1e7da7cb1af51e51_JaffaCakes118
-
Size
88KB
-
MD5
8c3b9ff3e295468b1e7da7cb1af51e51
-
SHA1
532aeb133f4ec07de5e033d32b4588ee3a8adfee
-
SHA256
5bfafd455c6eff8f1294c8dbe2e2dbef8f8c126605ea76759fbee44ed172951c
-
SHA512
c60f152963795ee6055a36827159158b5d7a7a0d5da1fee472dda16bb04a798ba486f17a025f2fb781b47ce2c4a30df560239de6471e75682ea08ef474ae717f
-
SSDEEP
1536:eeRMUsHlAWqiXltHtNeckmqmqcuxnBan7WaY95b+n:5RMUa9qi1tHeclqc5C1i
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8c3b9ff3e295468b1e7da7cb1af51e51_JaffaCakes118
Files
-
8c3b9ff3e295468b1e7da7cb1af51e51_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
CODE Size: 65KB - Virtual size: 80KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.abss Size: - Virtual size: 168KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
DATA Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.atls Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.shared Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 260B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ