Static task
static1
Behavioral task
behavioral1
Sample
8afa9cd45ecd8fdf62497954c65cd572_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
8afa9cd45ecd8fdf62497954c65cd572_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8afa9cd45ecd8fdf62497954c65cd572_JaffaCakes118
-
Size
98KB
-
MD5
8afa9cd45ecd8fdf62497954c65cd572
-
SHA1
4719191fc61148e8d0bdef1ca2d8eb2a48425968
-
SHA256
34ab9f8fc7963b6cac66acd44fdfbfa631c411fb40deac3bdcc535d53b4243ca
-
SHA512
8aaea57ee525c62a3460ebc2bd3e7d564a3c77e3471dc3eb5a0c1f2baf2cefcd78adad2ee256182e5cc0571513b38c2ccd12b0972f5c3bc3330cad22dc1001c2
-
SSDEEP
3072:SKtzR927265wUsAZdr5PkB7RSb9nEyXgxv5hNWPY5wU5:SOzC265wWdraB7RSbtEKgh5hNWQ5wA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8afa9cd45ecd8fdf62497954c65cd572_JaffaCakes118
Files
-
8afa9cd45ecd8fdf62497954c65cd572_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
5a7sboi Size: - Virtual size: 176KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ldaoesdt Size: 93KB - Virtual size: 96KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rv9up5 Size: 4KB - Virtual size: 499B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE