Static task
static1
Behavioral task
behavioral1
Sample
8c848cd9632a624aa15a75501469214e_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
8c848cd9632a624aa15a75501469214e_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8c848cd9632a624aa15a75501469214e_JaffaCakes118
-
Size
2KB
-
MD5
8c848cd9632a624aa15a75501469214e
-
SHA1
80abdcc75f34a7aba53a3118081b1ba8ea540315
-
SHA256
18950fb4b1f190738a2ed94c5a732b17bd795447afcb97bd3ba8b253c91ff8d0
-
SHA512
89d2cce1dfb1558d0e37eff023d168ea851ba02f7c3aa4f41476ae38a58ca0592cbc327deb79bc8608e93d83efb0cbe10baec3b7c046595c613485da8ed20bc7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8c848cd9632a624aa15a75501469214e_JaffaCakes118
Files
-
8c848cd9632a624aa15a75501469214e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 23KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 110KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ndata Size: - Virtual size: 44KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 391KB - Virtual size: 391KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ