Static task
static1
Behavioral task
behavioral1
Sample
8a0112b1918c745cc99f39eda9c5eaa0_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
8a0112b1918c745cc99f39eda9c5eaa0_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8a0112b1918c745cc99f39eda9c5eaa0_JaffaCakes118
-
Size
1010KB
-
MD5
8a0112b1918c745cc99f39eda9c5eaa0
-
SHA1
775e0c3d936234677981e80bfb1c48d7f4bd815f
-
SHA256
3d54c6d8a3d9b817428326d65e2157c2071b5c3dac634226a30855ef4c1fe1e1
-
SHA512
13edd136e600e7d29b9fdde9b0feb7d39a3308cdf2af9c2cc152f5dce42e1b746f599c7b0943d5e0fe2e7a035a5027da7265ed86464c51b3d683cb2339de9733
-
SSDEEP
12288:IBm5O2SrHhWa7mEqrSwJNJbZOoiQ95BI9gecInQ+HGR:IBm5O2SrHhWa7mBzJNiQ95BpeLQ+o
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8a0112b1918c745cc99f39eda9c5eaa0_JaffaCakes118
Files
-
8a0112b1918c745cc99f39eda9c5eaa0_JaffaCakes118.exe windows:0 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
xicheng! Size: 1KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1008KB - Virtual size: 1008KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE