Static task
static1
Behavioral task
behavioral1
Sample
8876ab3208fdc07c46f2e3e78e714767_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
8876ab3208fdc07c46f2e3e78e714767_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8876ab3208fdc07c46f2e3e78e714767_JaffaCakes118
-
Size
202KB
-
MD5
8876ab3208fdc07c46f2e3e78e714767
-
SHA1
ce87154b9591f4559e9665014462678944103594
-
SHA256
b86e916145c79938177e85b6856097b941597e029271d706328be905abc519a9
-
SHA512
7336f2d14318e455fc5df9563906d08d1b144d9dc7ea7ef342e5b5650299f5c73a71d1f67b668de3665fe02b8db461b9f2a3a7e6cd10fc84e8b27c2a8367a262
-
SSDEEP
3072:PDtL5xtXk4Xc3632VK8EdgF8bJPkn2IZi01UXnofgZtXd/Si3YAHtgMpNpEyL:PbPhMm2VKVJMt51UXDDNfNZL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8876ab3208fdc07c46f2e3e78e714767_JaffaCakes118
Files
-
8876ab3208fdc07c46f2e3e78e714767_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.packed Size: 512B - Virtual size: 476KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RLPack Size: 201KB - Virtual size: 218KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE