Static task
static1
Behavioral task
behavioral1
Sample
8cd07008fd61e57a9cd8951781ac8c53_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
8cd07008fd61e57a9cd8951781ac8c53_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8cd07008fd61e57a9cd8951781ac8c53_JaffaCakes118
-
Size
545KB
-
MD5
8cd07008fd61e57a9cd8951781ac8c53
-
SHA1
5bbc1619f8b443724e64b5364620ad917013b0e0
-
SHA256
5b125c66886e500b09056429a64d4d462442171c2856091dd3c19d19e16c4a16
-
SHA512
3b2dd5cdc3db44f07f8c6bd66147d7a8cca6f65f417d03cec1a4a092d8518195182ad2a05dd834e020f3f75109e3871dc2cc3e29a8799b6d02569a62404c7dba
-
SSDEEP
12288:0k+uirt0E/e0PlgCqD2ULkcqAUs6IdmxUzAMe9O9pgPmlsDb:01ZZ0Se0PlgRkcqeExAAMe9+pgP9Db
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8cd07008fd61e57a9cd8951781ac8c53_JaffaCakes118
Files
-
8cd07008fd61e57a9cd8951781ac8c53_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.code Size: 6KB - Virtual size: 272KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 529KB - Virtual size: 532KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ