Static task
static1
Behavioral task
behavioral1
Sample
8a4df06c6aa6b175fde64d32997aa4d1_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
8a4df06c6aa6b175fde64d32997aa4d1_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8a4df06c6aa6b175fde64d32997aa4d1_JaffaCakes118
-
Size
173KB
-
MD5
8a4df06c6aa6b175fde64d32997aa4d1
-
SHA1
13c1b49233ca045eb27a76b99a5e8f5fc2a549bf
-
SHA256
d238671ac97c920f1b48bdf52abe319c4e78d3d27ea17cad94373fffce5dc9ad
-
SHA512
130a53b1757db5f3b491911497a6dd861b7d9f9cac68b67cad6b20e36743fd578278b9e72efc5e5ea9fba90c7a3dd0b87c3ba215eca12ca9dedb8012d5cf881c
-
SSDEEP
3072:cfBx0XjOJrJSFpUhY930bP8k8xP8kFPnEctcEnPFk8Q4Oah:WB/6Sa30bP8k8xP8kFPnEctcEnPFk8Q4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8a4df06c6aa6b175fde64d32997aa4d1_JaffaCakes118
Files
-
8a4df06c6aa6b175fde64d32997aa4d1_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 160KB - Virtual size: 159KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ