Static task
static1
Behavioral task
behavioral1
Sample
8a3bb76d2ad91e6d83d95247a2a05ccc_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
8a3bb76d2ad91e6d83d95247a2a05ccc_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8a3bb76d2ad91e6d83d95247a2a05ccc_JaffaCakes118
-
Size
695KB
-
MD5
8a3bb76d2ad91e6d83d95247a2a05ccc
-
SHA1
cebde701362f4130ce99d3ec50455c6737544827
-
SHA256
ce46f41b65a8426ed8b73f59a918cc893916762883d67abb210621e51dad0f3c
-
SHA512
b1cb2c85659a2984acc5fabe3b99e9b35df779c4d568ef62869d428fff2fa29793af8e5e9b42611e462fa34a060b5a6547ae4b545d1cafa2c8b41389d04b8f77
-
SSDEEP
12288:h6lg9NZK9jbrW5AwGwHDx1fKI/n2vVtO2tjvP5cU7MoShS/BTP:Y+969/rW5AjixFn2vjO2tRWC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8a3bb76d2ad91e6d83d95247a2a05ccc_JaffaCakes118
Files
-
8a3bb76d2ad91e6d83d95247a2a05ccc_JaffaCakes118.exe windows:0 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
1111 Size: 661KB - Virtual size: 664KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
2222 Size: 12KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
333 Size: - Virtual size: 8KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
SR4444 Size: 13KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
5555 Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
666666 Size: 19B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
777777 Size: - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ