Static task
static1
Behavioral task
behavioral1
Sample
8cb2bdae0fbd064441530838da393f68_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
8cb2bdae0fbd064441530838da393f68_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8cb2bdae0fbd064441530838da393f68_JaffaCakes118
-
Size
44KB
-
MD5
8cb2bdae0fbd064441530838da393f68
-
SHA1
9b30b26983df356526e92c25b05fd295ae813d9c
-
SHA256
0945398893c675c6f4db7a62e2d7fb8845477be72b0356f322eac55bae7d6e8c
-
SHA512
18da04dd70f4a6578256b844be487baf3b5956ae276a1545864a83df8784f74ff8a079a387cb17a3ca5a7805b7f181d491cad4ac7de1698d8549653f9a3836c5
-
SSDEEP
768:hLfh2EZv40HWBKCnmA/47mGSVci1fttGU6rFYcLDzGB3hjigBbBplolyRzAZ4/bK:ht2EZv1HC3m1ycisUqFRDzU3tfl7osBp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8cb2bdae0fbd064441530838da393f68_JaffaCakes118
Files
-
8cb2bdae0fbd064441530838da393f68_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.xak Size: - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.xak Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.xak Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.xak Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.xak Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE