Static task
static1
Behavioral task
behavioral1
Sample
8a5c4ff58e1719a6188cbed970f54f18_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
8a5c4ff58e1719a6188cbed970f54f18_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8a5c4ff58e1719a6188cbed970f54f18_JaffaCakes118
-
Size
88KB
-
MD5
8a5c4ff58e1719a6188cbed970f54f18
-
SHA1
50e683f6709137dad14ff06ed28e0768b15ca957
-
SHA256
07c6eee42cacfed81db6ff02ace94196748959b9f24ff70d039e44a930ecc349
-
SHA512
c200e0d90c03b8afc31d118efb8f3269fc9b1d837fe6645d97cfc4cee2302cae4bc3846100166a8a9a9e3c99641bcbe00a611b8aa99949325e22490676c0e80d
-
SSDEEP
1536:A8xqmQFZ4moah2lXBpbWvti6tli7LAXnjX1TxdoTpHt:17hm0XBpeptQ3ATX1xKb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8a5c4ff58e1719a6188cbed970f54f18_JaffaCakes118
Files
-
8a5c4ff58e1719a6188cbed970f54f18_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ