Static task
static1
Behavioral task
behavioral1
Sample
8b37de96546eade9327f8a5742371d0d_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
8b37de96546eade9327f8a5742371d0d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8b37de96546eade9327f8a5742371d0d_JaffaCakes118
-
Size
180KB
-
MD5
8b37de96546eade9327f8a5742371d0d
-
SHA1
4ea53df1a823076b08009a6760afa4a67918135f
-
SHA256
af4710155b35d9a18776da8541fe393522fef2b30889363d2245472ce0acef92
-
SHA512
81034304020295f35cab3d6823f9bc5a084784c0b005904a6fab0a4e37883011f86819305fba2e24b17f2611f5b6880470d4396590880ad88b65751e58fcf000
-
SSDEEP
3072:8vAGHKKu76SmVv7rpVO+tx5Q+BpG+pSLYbXjxLJtdWX5zYwTHSU:8v1KKIWv7rpVO+T57pGZEb1LLUJLHSU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8b37de96546eade9327f8a5742371d0d_JaffaCakes118
Files
-
8b37de96546eade9327f8a5742371d0d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: - Virtual size: 540KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 179KB - Virtual size: 180KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE