Static task
static1
Behavioral task
behavioral1
Sample
8bba1fde65d37d3eec7847e2c92270fe_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
8bba1fde65d37d3eec7847e2c92270fe_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8bba1fde65d37d3eec7847e2c92270fe_JaffaCakes118
-
Size
421KB
-
MD5
8bba1fde65d37d3eec7847e2c92270fe
-
SHA1
a910c1093704274d42f7b84372612c36f9eb0333
-
SHA256
55c2ac04d3346c4644f3ddf2659db9d0182397a8c4105a9017422a53b70db478
-
SHA512
a4888398e1557f55bcbd0159b3fad0722a106f995258271ff51081d16682029b4d4c2f3f1f6435696997937041b18b415ac25ed70d2a9d4f00fac89d98f80e39
-
SSDEEP
12288:05mQ7jA+nFAY0Y4oj6thYk6ZFsSXijvGZlgV13:05vChY4M6uZmMirkuV1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8bba1fde65d37d3eec7847e2c92270fe_JaffaCakes118
Files
-
8bba1fde65d37d3eec7847e2c92270fe_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
CODE Size: 287KB - Virtual size: 286KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 104KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 2KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ