Static task
static1
Behavioral task
behavioral1
Sample
8bfe220f774e7accb08f323d6de7c6d7_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
8bfe220f774e7accb08f323d6de7c6d7_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8bfe220f774e7accb08f323d6de7c6d7_JaffaCakes118
-
Size
462KB
-
MD5
8bfe220f774e7accb08f323d6de7c6d7
-
SHA1
eb4f0656b1542b7e101164eb65503e1ec998ff49
-
SHA256
f3c0acfe06eedf9e415dc9197f19ab50763873513bfe15ea38e1619ec1b5d4ca
-
SHA512
e7105cf0cc44573e3eeb0f0a074f8a5912484659b1367be179a8c85557c08c1be6d7a0e3a997101a647f6574b9cf3809a4abcdcce996fd4a9e6f4f30e438ac14
-
SSDEEP
6144:u6St7kFmehO3ZhMaHoeCZn+Y0Aoh0To7bh7E694KRadKnrDBlJnQigwxydHl:+tAFmeUxol+Y+eMh7F9M+nVQiiF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8bfe220f774e7accb08f323d6de7c6d7_JaffaCakes118
Files
-
8bfe220f774e7accb08f323d6de7c6d7_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 387KB - Virtual size: 386KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 16B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 30KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ