Static task
static1
Behavioral task
behavioral1
Sample
8ca399efded78bb3cbb2e583158742b6_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
8ca399efded78bb3cbb2e583158742b6_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8ca399efded78bb3cbb2e583158742b6_JaffaCakes118
-
Size
39KB
-
MD5
8ca399efded78bb3cbb2e583158742b6
-
SHA1
e211b0964810a787956335a9931926d0b230c9ff
-
SHA256
1e2815932532204a039244b13d969dca454727dea83d20e0e3d9c9bd5dbc59ad
-
SHA512
96a8a476abc900f80688493877d08dd76b0d091975c44b274c97d0d2800f561867730c1ccd3109f3785941853b221f703481185bc158c5c75529b4c8f8c95e78
-
SSDEEP
768:wSXZB/x41tVg0VBG98r9qxff6MWX/qYbTNXKQQmRy2LIQzTGf/:wIn/x4LSgBM8I57WxTNdQmRXIQy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8ca399efded78bb3cbb2e583158742b6_JaffaCakes118
Files
-
8ca399efded78bb3cbb2e583158742b6_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 38KB - Virtual size:
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE