Static task
static1
Behavioral task
behavioral1
Sample
8b0501b11f69bf8a26bf01a7a0fedfbb_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
8b0501b11f69bf8a26bf01a7a0fedfbb_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8b0501b11f69bf8a26bf01a7a0fedfbb_JaffaCakes118
-
Size
1.1MB
-
MD5
8b0501b11f69bf8a26bf01a7a0fedfbb
-
SHA1
b0b784c2435aa8372500892bd52fe0af3f614d6d
-
SHA256
5428f4ab45cae533d8e33e7ae24fc6ad22a6c4e9f0eaae8515496ac5b02a75d0
-
SHA512
de32e149840af1bffc519e186fb7069f0dc1d32d5a72be3e27a11564d43cedcd0317bdcf74243ee26b0b7e1fa06dc58f6119b955b6483bbc4728fbe8077e02f0
-
SSDEEP
24576:P9qieoyYA+Ah6C6tKS0XDE8B6IWF3eqnItE:l4HxOKXDEutE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8b0501b11f69bf8a26bf01a7a0fedfbb_JaffaCakes118
Files
-
8b0501b11f69bf8a26bf01a7a0fedfbb_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 770KB - Virtual size: 769KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 16B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 58KB - Virtual size: 58KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 297KB - Virtual size: 296KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ