Static task
static1
Behavioral task
behavioral1
Sample
8ca5f31b1c1df08391abb584a114c3e2_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
8ca5f31b1c1df08391abb584a114c3e2_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8ca5f31b1c1df08391abb584a114c3e2_JaffaCakes118
-
Size
6.3MB
-
MD5
8ca5f31b1c1df08391abb584a114c3e2
-
SHA1
78eeee6399ae136f4ee5a35a3062a34cbf8b11b2
-
SHA256
1a84c5effd0bcef8e2a4311e2641b0ba5804cd78a04ee553446ee1a62d2ed870
-
SHA512
5392de044c6146b9f8eee3faad8a29a22196eacda989e40e61bcd0feb2352884f00392fb2eb9583eb70fec54911dc9cc7d17f3cf272669aeeafc19c11b5fab48
-
SSDEEP
98304:7/F82+pJBGHe+593g9R2YQQlWXCmLzODxzv8/gIY6OkWBSTxba2i5XP:VwJB29Qv7QQlYAd6yBqxO1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8ca5f31b1c1df08391abb584a114c3e2_JaffaCakes118
Files
-
8ca5f31b1c1df08391abb584a114c3e2_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.packed Size: - Virtual size: 16.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RLPack Size: 6.3MB - Virtual size: 6.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE