Static task
static1
Behavioral task
behavioral1
Sample
8b51131bf0f0f6ba72a4d7bb9356a2e6_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
8b51131bf0f0f6ba72a4d7bb9356a2e6_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8b51131bf0f0f6ba72a4d7bb9356a2e6_JaffaCakes118
-
Size
2KB
-
MD5
8b51131bf0f0f6ba72a4d7bb9356a2e6
-
SHA1
c4bc7fc2ef88ec5362763dc79cf91f149a522da7
-
SHA256
961df62c99da7db6cf0eb1bc4344e8bd48e1d7538b09584fadff270aab41b477
-
SHA512
2b9c3c23a0021ff73f075485369bb4103c55e030ea9ffb1b38cde33334ecddac2e8f2bd6f2496b8261400049f18394f30a0ac839841ca12b6a9f543666480338
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8b51131bf0f0f6ba72a4d7bb9356a2e6_JaffaCakes118
Files
-
8b51131bf0f0f6ba72a4d7bb9356a2e6_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.Upack Size: - Virtual size: 3.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 458KB - Virtual size: 488KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE