Static task
static1
Behavioral task
behavioral1
Sample
8b5d90da2cac9f2ce68c8418580e449c_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
8b5d90da2cac9f2ce68c8418580e449c_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8b5d90da2cac9f2ce68c8418580e449c_JaffaCakes118
-
Size
710KB
-
MD5
8b5d90da2cac9f2ce68c8418580e449c
-
SHA1
3c836059689f1db135b1dbaf90a3ad612c80b030
-
SHA256
c829a7e94ea7badec3cd64c300629d62ca6f4856db8dc5d261a93e943f97c19d
-
SHA512
37d8f2ab3e6e0bb2a328d7f370f88c1d5e0739fe964e74e59fad1cf1be988a8fbdd880788661a0bccc2f15c63d0c8ec62ac6de65d3ab5bfb7dd55ac840b1d3bd
-
SSDEEP
12288:uf5WF0d6XI17S5K5kqzJ8Q4NdbfQ8efQfw608k1Z+kWrdjciSK9T5ZFsfOSRAGHT:E56yOI9S5K5k8J8RDveBmUWrdjciSKFC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8b5d90da2cac9f2ce68c8418580e449c_JaffaCakes118
Files
-
8b5d90da2cac9f2ce68c8418580e449c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
ASPack Size: - Virtual size: 607KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
ASPack Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ASPack Size: - Virtual size: 9KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ASPack Size: - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ASPack Size: - Virtual size: 20B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ASPack Size: - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
ASPack Size: - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
ASPack Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
ASPack Size: 709KB - Virtual size: 712KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ASPack Size: 614B - Virtual size: 614B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE