Static task
static1
Behavioral task
behavioral1
Sample
8b589c35dc4a9e87bf42fbf71c1c9b59_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
8b589c35dc4a9e87bf42fbf71c1c9b59_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8b589c35dc4a9e87bf42fbf71c1c9b59_JaffaCakes118
-
Size
144KB
-
MD5
8b589c35dc4a9e87bf42fbf71c1c9b59
-
SHA1
b4195e98d84a088512a2bc53f79a0583195f5036
-
SHA256
72b9123c48a347bfe4998d7d7d2d70a6e922ef31cab587f4bbd1fa6b58a45980
-
SHA512
4ab56b6461ef3893e03c9f3dfb2beab393780942f019d78b175babb31456a595be5ea6e1c6bce93f3e20434083584d1a1515d4d4f7a924da4fac991f4f4ccf7f
-
SSDEEP
3072:XoDVLI7rQctXpPFCk3VYI4ViPP6Li4ym4vTu8eiN41ZeX:XYIv15PFOViPCtym4v/eu41W
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8b589c35dc4a9e87bf42fbf71c1c9b59_JaffaCakes118
Files
-
8b589c35dc4a9e87bf42fbf71c1c9b59_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 112KB - Virtual size: 111KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ