Static task
static1
Behavioral task
behavioral1
Sample
8979b6b3abba24431f3081d35c7eeb37_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
8979b6b3abba24431f3081d35c7eeb37_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8979b6b3abba24431f3081d35c7eeb37_JaffaCakes118
-
Size
172KB
-
MD5
8979b6b3abba24431f3081d35c7eeb37
-
SHA1
2667eda2aad5a1685e120e0d848de475804a2c08
-
SHA256
923b7c9a15eb53c81ba6f9fda5a80f41e3d8d582bc318c08000e35a955c858ca
-
SHA512
fc0eb1de9ac8a4c9bbfbd8ad1b45a797d62bfcbc099b1d903226af719fe566dd3660aa126b5d2304b64ac3cdb3e2a912b4d46160c0b48962e2ae17abb1503e4b
-
SSDEEP
1536:NUnKpm7lO+tpwiiPdugpNXPcFkf8qrXTxZFumdqnTIZsufBQNaV0YvObG:NH485PUE8qtu9TVw0YWa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8979b6b3abba24431f3081d35c7eeb37_JaffaCakes118
Files
-
8979b6b3abba24431f3081d35c7eeb37_JaffaCakes118.exe windows:0 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
drws1 Size: 168KB - Virtual size: 168KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE