Static task
static1
Behavioral task
behavioral1
Sample
8ac4a3ca963846be94c6718305c6fc89_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
8ac4a3ca963846be94c6718305c6fc89_JaffaCakes118
-
Size
582KB
-
MD5
8ac4a3ca963846be94c6718305c6fc89
-
SHA1
29b31a0ca4afe01e2ef2465131fdc62c4b40fcff
-
SHA256
b4a557e8296aa176bc483680ac1621cd6e0d4faf6ab20e58c3b67057345fd2e5
-
SHA512
82105a818ebee969f52a6cf9ccd9a88b5c761c9489e796a1ce4915e564c3ec524de15dce92a1fb81d6f2a484d1c32f7e0082276faa751bbee6a2d8a403e563ba
-
SSDEEP
12288:DEuLIT88KEFhMD1erMOmycAfsQ+3JFL6b7MP+Dd2v:DEuwXDF2erMjyc6RGI7MP+h2v
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8ac4a3ca963846be94c6718305c6fc89_JaffaCakes118
Files
-
8ac4a3ca963846be94c6718305c6fc89_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 131KB - Virtual size: 876KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 353KB - Virtual size: 524KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.Kosomak Size: 91KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE