Static task
static1
Behavioral task
behavioral1
Sample
8951d0b6b3690e112a2411a45691b629_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
8951d0b6b3690e112a2411a45691b629_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8951d0b6b3690e112a2411a45691b629_JaffaCakes118
-
Size
92KB
-
MD5
8951d0b6b3690e112a2411a45691b629
-
SHA1
d291f4f99949895d3511e5bfedde73a19045f353
-
SHA256
14499b478af465512c78490e6e9ab6d3916fdf59d9795db7b5e3ed1d7aae47ef
-
SHA512
5f55603c59a16dbdd456bad29ce339d4e1981b2528e8d289dfcffaef42205597e241949bff7b4a0f3682486dd9e1c4ce603323105dfe0a4f7a792627d1072e9a
-
SSDEEP
1536:SNeBG30QBadb+ZDDJmcov4TqAAl++JoKHEJlAC9ZZ/A/jRQQ/GsnCQDQ:HBs0dSZDDAgTqAJ+JoKHEJCC9Z5iRNet
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8951d0b6b3690e112a2411a45691b629_JaffaCakes118
Files
-
8951d0b6b3690e112a2411a45691b629_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 74KB - Virtual size: 128KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 36KB - Virtual size: 984KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE