Static task
static1
Behavioral task
behavioral1
Sample
8955a48710a3dc8ee59f673405426e40_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
8955a48710a3dc8ee59f673405426e40_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8955a48710a3dc8ee59f673405426e40_JaffaCakes118
-
Size
88KB
-
MD5
8955a48710a3dc8ee59f673405426e40
-
SHA1
3a354493447a659ead0d08a3d091f352806c898a
-
SHA256
afd6b1488c5b5b82219106a252d09853776c48766097c90fb7854295a5b42a0b
-
SHA512
15964b66a534be1dc9be29a66719bf9ff09d52b0cb42496e72452c2c01fa5c51f031a4f3c63cd6c9295d346fdd1deec92781b7b7d56e99286bc38a9f40cd0367
-
SSDEEP
768:x13+1NTlezZEatuHqLPkhEryY5USTMSuHcj19lmVWUE2q7NRbCxX5HoL3/QZZHwq:xp+1NeZmhtYhUKLPyQH2xEAAwT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8955a48710a3dc8ee59f673405426e40_JaffaCakes118
Files
-
8955a48710a3dc8ee59f673405426e40_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
�S=`� _� Size: - Virtual size: 376KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
E��<�� Size: 20KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 67KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE