Static task
static1
Behavioral task
behavioral1
Sample
8a9697ebcaad02286791b399d395e2b8_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
8a9697ebcaad02286791b399d395e2b8_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8a9697ebcaad02286791b399d395e2b8_JaffaCakes118
-
Size
353KB
-
MD5
8a9697ebcaad02286791b399d395e2b8
-
SHA1
02fc1a616eccca7760ac3c9d81c9d92d2757f971
-
SHA256
c7644e028fdae1b54ab35c5b5720c8ec14fb3c66837ccb64c1dad84f7eb0fb53
-
SHA512
4200b3572d206129b4b0cf2105794f780205ddb8e1de463a0b6c4b0dab3644a07fadebd5d2aec87d4ac492d7bfbd27391066dd356a623e5f0998863dd57bd0b9
-
SSDEEP
6144:zBSBVUdXeiY2VA5NtK4IsUuJnttd7ziOs37I4ChaylPUXo2g0l/zoKUvDbHr:1SBid+2VQNIRS/ijsR4ylko2g0lNUvDP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8a9697ebcaad02286791b399d395e2b8_JaffaCakes118
Files
-
8a9697ebcaad02286791b399d395e2b8_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
CODE Size: - Virtual size: 484KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 350KB - Virtual size: 352KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE