Static task
static1
Behavioral task
behavioral1
Sample
8895f9ddb6c6eedf09954695635fd256_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
8895f9ddb6c6eedf09954695635fd256_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8895f9ddb6c6eedf09954695635fd256_JaffaCakes118
-
Size
931KB
-
MD5
8895f9ddb6c6eedf09954695635fd256
-
SHA1
df2a489fd42a7a52b706f96891c6484342b49f64
-
SHA256
971472ec0fb09c3b3882fd4c778fa894abdeecec39082db3fbd299cc15b2236f
-
SHA512
399cc7771728b142d6a2c90d7cc310cdb00e08abb24a315683c8cfe680762edb8110ea5bd1b85ed48568ff84451ee38662b3c3cfede6a4e5029bc457f33b4246
-
SSDEEP
12288:iMsL6jDny4HOByCy+B24KSiGaRLYuo3PHXnPf+9RiMuzm69TFURPcDMv:iMXFH0yMBF4RLpUfXe9fuvFiPcIv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8895f9ddb6c6eedf09954695635fd256_JaffaCakes118
Files
-
8895f9ddb6c6eedf09954695635fd256_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
dret Size: 232KB - Virtual size: 232KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
No Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
SH Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
AC Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.newimp Size: - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE