Static task
static1
Behavioral task
behavioral1
Sample
8cd4327abb1103ca2bb2a51c6f992106_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
8cd4327abb1103ca2bb2a51c6f992106_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8cd4327abb1103ca2bb2a51c6f992106_JaffaCakes118
-
Size
165KB
-
MD5
8cd4327abb1103ca2bb2a51c6f992106
-
SHA1
2a085c799a33a4f8852fab3c9d6db6e1e75caf04
-
SHA256
c5b6199499ca991f8e3906126847b0670b9b200699d4b059d88255e4cb632cbf
-
SHA512
b824e71ed27d4f362343f030085e4e0347b9ba850e65186122d2319e2f694ecce6d7c060eff2205904b8f49ce3ec5daf1b84f5d791e4f4e459c37f0416c138a9
-
SSDEEP
3072:l+4UhGx0ZDRwtF8yZJ9aG7EYBJZrr4k4h2xHy2AV5eSHrNUU8QFfi:l+49x0ZetF8yZJ9b3Pf9E2ALegrNqKq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8cd4327abb1103ca2bb2a51c6f992106_JaffaCakes118
Files
-
8cd4327abb1103ca2bb2a51c6f992106_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 67KB - Virtual size: 156KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 81KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ