Static task
static1
Behavioral task
behavioral1
Sample
8a009c36509bbad5cbc61bb48e0d2d9d_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
8a009c36509bbad5cbc61bb48e0d2d9d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8a009c36509bbad5cbc61bb48e0d2d9d_JaffaCakes118
-
Size
145KB
-
MD5
8a009c36509bbad5cbc61bb48e0d2d9d
-
SHA1
fe8e7ab65cdbfacb05559ff2d7c67f3c13530671
-
SHA256
d8621c9450099dd08b4b679471df31a24ebbd06bc7b25d330a40e2be29b79586
-
SHA512
c17d3977be3c144c93f697fe17000522552fcd49453b332315a848baeb60cf382d5d12dacb8a018fcce4e2a33e99463461add7df18d63447a8e96b346df8e118
-
SSDEEP
768:GyBaO8T15A0JjG2ryPVmBihdVAJzlIxH1dT6HwTfBrGNZ7nR/DEC:GyeT1JcfRA81d8NZFEC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8a009c36509bbad5cbc61bb48e0d2d9d_JaffaCakes118
Files
-
8a009c36509bbad5cbc61bb48e0d2d9d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
. Size: 36KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
. Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ