Static task
static1
Behavioral task
behavioral1
Sample
8bebe971dc7baca6c39957ab9cb46c05_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
8bebe971dc7baca6c39957ab9cb46c05_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8bebe971dc7baca6c39957ab9cb46c05_JaffaCakes118
-
Size
20KB
-
MD5
8bebe971dc7baca6c39957ab9cb46c05
-
SHA1
1b8d5436bd8d3b38e4b1ab372e5369a7bc0af514
-
SHA256
e73d7c536273bee16f1812907150936af24e24ac287760107758650e6dc2ced8
-
SHA512
cf6d7e32f7f340f3e03b690a062b3760ffe25d917fe981de0c24054558c040d7b7a8e082c4deb886fbc7a98e862cf70ee96cbcc07d7f9005d35d610259fac413
-
SSDEEP
384:2/oe8zdTyBsyqAIZhgSx582WEX/pOK83K1xzl3Y12U+6rywwipzW0XWkVbZb7OF:3WsyqAggS821OKF5BY/+RiFHFIF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8bebe971dc7baca6c39957ab9cb46c05_JaffaCakes118
Files
-
8bebe971dc7baca6c39957ab9cb46c05_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 9KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.petite Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE