Static task
static1
Behavioral task
behavioral1
Sample
8b5a15d3659d85a1f9464e59c48d4d74_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
8b5a15d3659d85a1f9464e59c48d4d74_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8b5a15d3659d85a1f9464e59c48d4d74_JaffaCakes118
-
Size
60KB
-
MD5
8b5a15d3659d85a1f9464e59c48d4d74
-
SHA1
94eca7a0330ed19f07fde55a3ef64b7b105e04d8
-
SHA256
975e799dbf7eb2c88147aab34f9c13be3ee7beef44389f2e582ddefff7a4f4b6
-
SHA512
0a25404067576b9be3795d53a9e89ed672b240c372d6dbd063391609d76887921801c5b6d0d92be863f25fd802d07729c8e7fe053eec591cceed1e4185fe287e
-
SSDEEP
768:J9vlB30f5I1ynKyj+4nWSmS4QBJnAycnULcD3DtA3:JxlB30f5I1yKy64WejBiyP8ta
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8b5a15d3659d85a1f9464e59c48d4d74_JaffaCakes118
Files
-
8b5a15d3659d85a1f9464e59c48d4d74_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.fs Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ