Static task
static1
Behavioral task
behavioral1
Sample
8ac35db8bdbdf99cd61ffa1a3497db45_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
8ac35db8bdbdf99cd61ffa1a3497db45_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8ac35db8bdbdf99cd61ffa1a3497db45_JaffaCakes118
-
Size
6.3MB
-
MD5
8ac35db8bdbdf99cd61ffa1a3497db45
-
SHA1
ae4056a81f4d2b1a5163a0565c08e7e729745a77
-
SHA256
3b59086c8b0e43a61450f4c805a45b7f3598a59820b94ce55f9646d4ac7c2781
-
SHA512
2b1fd7bb49e646c0f25e596b39e94f7069ebdee2c838a9c01d9f1f7598904eab0c9ac73effbf87034600481b6f4e66e4d658da71b5a6ecaa97487eb44c4eed79
-
SSDEEP
98304:ZI+8sOiRwtTXoSp3QbQmhul1dpb2UnhlSkyrZLj/eQfjYSI9cn52S7STb+NlZKA9:ZkiRcVmEqUhSj2QK9cnY/+Nl/Z
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8ac35db8bdbdf99cd61ffa1a3497db45_JaffaCakes118
Files
-
8ac35db8bdbdf99cd61ffa1a3497db45_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
EPE0 Size: - Virtual size: 18.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
EPE1 Size: 6.3MB - Virtual size: 6.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE