Static task
static1
Behavioral task
behavioral1
Sample
8b5c09867fafa16ac08ee18f8286cf71_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
8b5c09867fafa16ac08ee18f8286cf71_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8b5c09867fafa16ac08ee18f8286cf71_JaffaCakes118
-
Size
290KB
-
MD5
8b5c09867fafa16ac08ee18f8286cf71
-
SHA1
0126889674afc2edc1827d019ffab7ccc32ad6fb
-
SHA256
2e12eaca4013045492f227b4ecf96b4527d6313d36b9f610dc2d1198643fedc3
-
SHA512
0252d68a0b042e37aa9d3e5874465ac7d57271a1a5666a71e08ad569011edd7cab9583c228d521885b6c46043361d9237613f6706c4fcc9bfb0e99be3e03d085
-
SSDEEP
6144:eHWh6kblYo8rJ0foxL+lSGGPoaYdZidihSlD41c9Bujy13:eK6kbllfW6lZaYrYCUr9Bujy13
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8b5c09867fafa16ac08ee18f8286cf71_JaffaCakes118
Files
-
8b5c09867fafa16ac08ee18f8286cf71_JaffaCakes118.exe windows:4 windows x86 arch:x86
22deaa3e5166e3019a02358581c9a9ee
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
_lopen
ExitProcess
user32
MessageBoxA
shell32
ShellExecuteA
Sections
Size: - Virtual size: 556KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 162KB - Virtual size: 172KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svkp Size: 127KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE