Static task
static1
Behavioral task
behavioral1
Sample
8a5d7c6c52a0385cd56de9c46878a0c7_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
8a5d7c6c52a0385cd56de9c46878a0c7_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8a5d7c6c52a0385cd56de9c46878a0c7_JaffaCakes118
-
Size
84KB
-
MD5
8a5d7c6c52a0385cd56de9c46878a0c7
-
SHA1
d8c15ac2d6559de0118c35e3d70fb4ca4cb05bfc
-
SHA256
401d8ae0ba3e8bdc0d3a2844d5af5fe479ca09cf6b8b49211f0f9a2b79a30f44
-
SHA512
e5de34b33a6178c71babead8e4ea97798c7369dc2fd7a299ca7da8af647b467d2c803f2966c8b5f1a0f93e6775766cc6fed3e885bcd68380a32dafa98f80b916
-
SSDEEP
1536:d4OlalFmTXI/Lpa6nByN8tMrf8OkYKkoAICXC1gj:d4OlcFMAh28yDknPfCC1Y
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8a5d7c6c52a0385cd56de9c46878a0c7_JaffaCakes118
Files
-
8a5d7c6c52a0385cd56de9c46878a0c7_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.text Size: 93KB - Virtual size: 93KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.itext Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 19KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 39KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ