Static task
static1
Behavioral task
behavioral1
Sample
8cbf7ddbe82465931decf007b6a7c1a2_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
8cbf7ddbe82465931decf007b6a7c1a2_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8cbf7ddbe82465931decf007b6a7c1a2_JaffaCakes118
-
Size
114KB
-
MD5
8cbf7ddbe82465931decf007b6a7c1a2
-
SHA1
683ea3bf30137e862dffc5a9c1907219238c8613
-
SHA256
44e42095f995897a7a7f105ec3557b84e8b6d686f055940b867b1433d09a7913
-
SHA512
82dda11d7032410fb98ad4d7e290959f5b6eea7126133fc0297fa822963731b1954cd63ae2da597f5a602d9cf6560cb7e081a9ba8cd59d0ffabd55b919fcda77
-
SSDEEP
1536:O7UsXVxJ0RzFCd0CgCS3lJyd4vS4ynWMhnIz74wi/95qaWMXjgbBCA5:wJxdzMqITMC/4J95qah+CA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8cbf7ddbe82465931decf007b6a7c1a2_JaffaCakes118
Files
-
8cbf7ddbe82465931decf007b6a7c1a2_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.rdata Size: 105KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE