Static task
static1
Behavioral task
behavioral1
Sample
8a92871128154b5ae7c90a44c665c3c1_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
8a92871128154b5ae7c90a44c665c3c1_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8a92871128154b5ae7c90a44c665c3c1_JaffaCakes118
-
Size
876KB
-
MD5
8a92871128154b5ae7c90a44c665c3c1
-
SHA1
f89216fa7406ef9e90166f479abd54c9991330a7
-
SHA256
ffa1c929302b844d4ba5f4327f69945ef7e18b6a842c7284d6d6741eb79e9e38
-
SHA512
8c3b83630cd4d4bd3c09f99bb9185868185917c3bdce96dc8a0207c336df76d3e22298f1e3aa76d7a4bb6920356f05b7bcde268e80f791ee0380adb6e0a40e37
-
SSDEEP
12288:BcBjgoMaPLhAb8P6gehpOVH0pg6b+V8LCeu24dxH5fYjHNEPOBo3fd/t40PQi4b6:Bcx+bcGfi3VAg2YfYjtMOYPQn6Zg1in
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8a92871128154b5ae7c90a44c665c3c1_JaffaCakes118
Files
-
8a92871128154b5ae7c90a44c665c3c1_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.textbss Size: - Virtual size: 1.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 852KB - Virtual size: 852KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ