Static task
static1
Behavioral task
behavioral1
Sample
8a56e2c8e50a3834c34de8c431256af4_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
8a56e2c8e50a3834c34de8c431256af4_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8a56e2c8e50a3834c34de8c431256af4_JaffaCakes118
-
Size
84KB
-
MD5
8a56e2c8e50a3834c34de8c431256af4
-
SHA1
2a06ff5afd3edd18d355008fe639f326c5f97ddb
-
SHA256
c280ebf8c1652cfc717fc40d7fa4647bc477407120c71d88aadb3ffcabbec082
-
SHA512
ed9bbb3b27bf2730112bc235dd1dabd4cf65426f9f5090e9569dcac156fc3102c1baa5def5cdb870d808092b599a720facebe3283cf03d445f0e18fc94d98887
-
SSDEEP
1536:y85CPxuNaJuNKLMPCFAgK0d9cS3j/rwScIzsFNH67qlM6fSJtvFbhTNmlQP:r5IxhJu2sCFAif7/tfzsFrOfFlTMlQP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8a56e2c8e50a3834c34de8c431256af4_JaffaCakes118
Files
-
8a56e2c8e50a3834c34de8c431256af4_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.ficken Size: 71KB - Virtual size: 124KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ficken Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ficken Size: 36KB - Virtual size: 976KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ficken Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE