Static task
static1
Behavioral task
behavioral1
Sample
8addb348a870c330437e315b6a41e5c0_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
8addb348a870c330437e315b6a41e5c0_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8addb348a870c330437e315b6a41e5c0_JaffaCakes118
-
Size
578KB
-
MD5
8addb348a870c330437e315b6a41e5c0
-
SHA1
57a2fb228a9ad4981e9ec16866248ca96acd8d93
-
SHA256
36a8e90cbc5dbea47c125d467b3cf9e2697a939c3e954ec0ef6d00c28f5c92eb
-
SHA512
a7ee47ac81536abf7597dc3d65325870d24de364c844a79fabe6c78407ec10bee2235513b229619b3bb5c016e1c365060598ded939cd2cf9346458c0db5ce7f9
-
SSDEEP
12288:ylm1Mkcy8ZwAemur0rPpvzCh2nHuej5hWgYFc4vgjfjcVh:ICMjy8qANur0tvOUHRDuu4vAIVh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8addb348a870c330437e315b6a41e5c0_JaffaCakes118
Files
-
8addb348a870c330437e315b6a41e5c0_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.text Size: 572KB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE