Static task
static1
Behavioral task
behavioral1
Sample
8ceb3cd6d925bf7f26a3367531a04d45_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
8ceb3cd6d925bf7f26a3367531a04d45_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8ceb3cd6d925bf7f26a3367531a04d45_JaffaCakes118
-
Size
106KB
-
MD5
8ceb3cd6d925bf7f26a3367531a04d45
-
SHA1
271263cfdbe2628277756a3eb2b3ed62c9bd1fd9
-
SHA256
5fa4a42c605e125a828073945ce45a78fdc52e3bfb2b01eb6944b6dd895bfb07
-
SHA512
01201967b2fd7070c5833e38ade0405c180898193538250c0bbca91f0dabcf65c6043ef5428129294b6759d7a36bfc4bbc87bbea5ad2d53a1d26ca0a4f53383c
-
SSDEEP
3072:r2RGcRO2LUYS/H4WE4TeHo0DKO1A6SUDxmK0zh8:cf75EH4WBwZe6bDxoze
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8ceb3cd6d925bf7f26a3367531a04d45_JaffaCakes118
Files
-
8ceb3cd6d925bf7f26a3367531a04d45_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
CODE Size: 1KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 98KB - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 47KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
wdsrsff Size: - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE