Static task
static1
Behavioral task
behavioral1
Sample
8c89a6b1164923ff611a761b0755f532_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
8c89a6b1164923ff611a761b0755f532_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8c89a6b1164923ff611a761b0755f532_JaffaCakes118
-
Size
10KB
-
MD5
8c89a6b1164923ff611a761b0755f532
-
SHA1
0ddac4e7a51130593e1b70dc7ac91c644eb0d52b
-
SHA256
7e94dcdf40fb553d4248dae1c87b590adcf0228791b7a8aeeb0c32f1691191ee
-
SHA512
034b33c51e76085dd8649b1ba3006d52363bb5c9b1e49743d5bdff63c07ecea9a7322fc05d9c3ed38c03a958345993744c55eae717c82d62c6cd1bf36c11980d
-
SSDEEP
192:i/TbIble8zdbEwPxK/F3blsyid2ITsPgoOYKHBgY0/nGOUYflHuhNlfJwVQSoD9:i/6e8zdTyBsyqAIZhgY0/nRflHulYoZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8c89a6b1164923ff611a761b0755f532_JaffaCakes118
Files
-
8c89a6b1164923ff611a761b0755f532_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 3KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.petite Size: 270B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE