Static task
static1
Behavioral task
behavioral1
Sample
8ca2325e07f199835d19159c92d90af0_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
8ca2325e07f199835d19159c92d90af0_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8ca2325e07f199835d19159c92d90af0_JaffaCakes118
-
Size
75KB
-
MD5
8ca2325e07f199835d19159c92d90af0
-
SHA1
4400d25b4ff7eca126cbd44b46346f6414c1e7af
-
SHA256
e7b98e3181e1d08f0eb16fb6d228fb3b432752e249416bfbe89259f35796d5c1
-
SHA512
ba0595095e6a9ec411afa75bbdb472ff44344a58a7e445939b8d7f5fb1e4e1f48193fb145af6ef87a4223062966256f0d75aba75fccaf9bc31d8d4814e552fa4
-
SSDEEP
768:qbmZStPUOdPNdT7d6ZLpt1qR43hcnHDcAICsfnztTo5BnTZVoW9A8ink8OIRYUGw:qvUCVqhQ43mc80tAB9VoL8ukiRYCPhGc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8ca2325e07f199835d19159c92d90af0_JaffaCakes118
Files
-
8ca2325e07f199835d19159c92d90af0_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.LB Size: 1.0MB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.LB50 Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
..... Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ