Static task
static1
Behavioral task
behavioral1
Sample
8a6bc9e08ddca865b33022d9afe4ea03_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
8a6bc9e08ddca865b33022d9afe4ea03_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8a6bc9e08ddca865b33022d9afe4ea03_JaffaCakes118
-
Size
608KB
-
MD5
8a6bc9e08ddca865b33022d9afe4ea03
-
SHA1
3f706a39242e5be4b957203d3b1c2f1b4b756564
-
SHA256
66c5c54bb15933766cc055412e89d19fd7807d6e772daa5cbae9fc2e7547e116
-
SHA512
6078db1870fd3cefff6e7743ddbf22476794f4dd7a0418b3457efa839c04e39deb13efbee281a2bf1e56c4bd2cbfe8f66874f32a5b370ea98d4ca5274bbda2a4
-
SSDEEP
6144:KoaG2YBO5aO0zVfx3edes+2l6gmi6ua5qJazQGlVUbKXG:haSBeaO0BfFXGl6Ri6O1eUbf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8a6bc9e08ddca865b33022d9afe4ea03_JaffaCakes118
Files
-
8a6bc9e08ddca865b33022d9afe4ea03_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.scpack Size: 480KB - Virtual size: 480KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 104KB - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.newIID Size: 16KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE