Static task
static1
Behavioral task
behavioral1
Sample
8885cc459f13fbda214d3d2bff87122e_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
8885cc459f13fbda214d3d2bff87122e_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8885cc459f13fbda214d3d2bff87122e_JaffaCakes118
-
Size
141KB
-
MD5
8885cc459f13fbda214d3d2bff87122e
-
SHA1
e38c887d9027dc52526a75ec493f5bae88691da4
-
SHA256
da565f18dd35bac951786bfcd6f272bdf6878526195cf56b8f1d26ca31a74342
-
SHA512
5b4d4d8dabad73ff97d02e923b1d253420a631d0ec9f0c6f5fc41b4965d81d10349e2a32fef371211d784e9920e847a9878d8e801f8ccc1d7b7cd4c88d668d8d
-
SSDEEP
1536:L8p4zxQ+uwmYcKL4IhQ+A1dQLxsnxKmz1vOMwFPKAs7RqbjfOjUjE6u1PJgtDaAn:LbxQBwm8OoKvIhF8ROiwD2cEtC5R
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8885cc459f13fbda214d3d2bff87122e_JaffaCakes118
Files
-
8885cc459f13fbda214d3d2bff87122e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
CODE Size: 116KB - Virtual size: 113KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.tls Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 12KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 8KB - Virtual size: 3.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: 4KB - Virtual size: 56B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ