Static task
static1
Behavioral task
behavioral1
Sample
8cac90a6bc0c5d14b0a7e50f7536472a_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
8cac90a6bc0c5d14b0a7e50f7536472a_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8cac90a6bc0c5d14b0a7e50f7536472a_JaffaCakes118
-
Size
336KB
-
MD5
8cac90a6bc0c5d14b0a7e50f7536472a
-
SHA1
34b4f66765a06cd97dff2067945e9f44140244a5
-
SHA256
c5d0e8c39ae5ce9368832cff00ad73f07115aadfd37764d4e82a7156daa4f0c3
-
SHA512
ebf0eb8b7f85a06d7daf29b06b12e46e1eaad7f769e1bde474adccb990f80c875e8da6387f87cb2bdad523695225f50c6edbd3b4dc2e1fc249279d3f905c6afa
-
SSDEEP
6144:ltpzb2vOSQ9DEUcDbgDOcfIzy4JGxxJzoTn0yZwQaQ009awzhM+NSk:ltRb2vOX63gNfqJGzoTn0YJawz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8cac90a6bc0c5d14b0a7e50f7536472a_JaffaCakes118
Files
-
8cac90a6bc0c5d14b0a7e50f7536472a_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 288KB - Virtual size: 287KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 20B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ