Static task
static1
Behavioral task
behavioral1
Sample
8af4832316069d59c4de8151e9956f3b_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
8af4832316069d59c4de8151e9956f3b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8af4832316069d59c4de8151e9956f3b_JaffaCakes118
-
Size
810KB
-
MD5
8af4832316069d59c4de8151e9956f3b
-
SHA1
05b3b14c0a78bf6d4eb8fd8f384dfca244c2f177
-
SHA256
92ab053cae09ac49a65b6f815f3389a01b1b144180393eb2f626dddace286869
-
SHA512
4d450b0156a8f3ebdaae0a289e5eed320f87403da93aeeef9beac44feb757028b39e1ebffa02ed22af42c33fd10b2904499fdf399766ca7daf279cb85e23cb95
-
SSDEEP
12288:s1dikW2kmHdnMQh1R3/WvcyhsdEoT+R9YpqdasDofR5HCP5k4WKt:6MkXHlMeH1yhsyoc9ISu5pCP51J
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8af4832316069d59c4de8151e9956f3b_JaffaCakes118
Files
-
8af4832316069d59c4de8151e9956f3b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 114KB - Virtual size: 420KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 688KB - Virtual size: 688KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rsrr Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE