Static task
static1
Behavioral task
behavioral1
Sample
8cb35c215fa2b7df15887ebd3eb7beec_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
8cb35c215fa2b7df15887ebd3eb7beec_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8cb35c215fa2b7df15887ebd3eb7beec_JaffaCakes118
-
Size
393KB
-
MD5
8cb35c215fa2b7df15887ebd3eb7beec
-
SHA1
55654c9d33e63926c6ac332bbd031f081353abd4
-
SHA256
c2de15b2c4aea047a82cb7af1f882ce7a6264e60706bcc44b47f54b1ce8bd46a
-
SHA512
99aa40f41c1044c168a8187d865b82b270fbe3ed8f90a1133f35ea4f5157f755b69fe3614be514378a029c97fe798bc50d028609fbd5731eb95945661a519c54
-
SSDEEP
12288:JICVmIfDwWYgRFr8vJ2hsZfwGYygpWr0:1Rf0WRRJ9yZfwGYygt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8cb35c215fa2b7df15887ebd3eb7beec_JaffaCakes118
Files
-
8cb35c215fa2b7df15887ebd3eb7beec_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 236KB - Virtual size: 236KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 73KB - Virtual size: 73KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.itext Size: 62KB - Virtual size: 62KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE