Static task
static1
Behavioral task
behavioral1
Sample
8c95261e5a8457b476a7caa4d4c02073_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
8c95261e5a8457b476a7caa4d4c02073_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8c95261e5a8457b476a7caa4d4c02073_JaffaCakes118
-
Size
43KB
-
MD5
8c95261e5a8457b476a7caa4d4c02073
-
SHA1
1c4b33545903ee77364fe14bfb77e83371b5e130
-
SHA256
79148e1fd7a0bf0fd33a0547ccdfe88b07f11dee8a61621b276f97b6ac562170
-
SHA512
1d2395ad4ca3992623f0c34a367485e37ffb787fb7fc92a6ddca1889e8e54f8de4438428b2d3e0c33a704e16753b80528c65d39af84271e1fdf90a9236107cee
-
SSDEEP
768:b7AnHzMK9BX0l09vQeO7McaHt1MLuqled5GobePaDPVeq:b7AYMlhQrSt1WxAG+eYMq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8c95261e5a8457b476a7caa4d4c02073_JaffaCakes118
Files
-
8c95261e5a8457b476a7caa4d4c02073_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.packed Size: - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RLPack Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
psoimeqk Size: 18KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
m1tp6a97 Size: 13KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE