Static task
static1
Behavioral task
behavioral1
Sample
8c922ef6ab199dfb8ab5f44dd1e3d502_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
8c922ef6ab199dfb8ab5f44dd1e3d502_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8c922ef6ab199dfb8ab5f44dd1e3d502_JaffaCakes118
-
Size
419KB
-
MD5
8c922ef6ab199dfb8ab5f44dd1e3d502
-
SHA1
f6d69778b0e514eb23d27a44fea472571441b20b
-
SHA256
f8953c06d71c7381a88e7346b1b91a2d208532a2f3a396dc8dafe0078b3f5ed9
-
SHA512
a73feef963b29887a11d169ec1e6721c696011da21f81e14ff69ee16713d3328466154b78d164e30f3dd392e37b0e0a453cfee9569b9ebe2a9a7dd4cd4146833
-
SSDEEP
6144:qOiUhs1icuL+xlrNZ6+IM9wm+qg2GV60SMfe98Gw+Gyy/e/WHV+exiD:qOiUhEI+x9NjfG4g2u6y60+eGW1hG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8c922ef6ab199dfb8ab5f44dd1e3d502_JaffaCakes118
Files
-
8c922ef6ab199dfb8ab5f44dd1e3d502_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
CODE Size: 202KB - Virtual size: 201KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 193KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 2KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ