Static task
static1
Behavioral task
behavioral1
Sample
8d2582d53acc97279185b91b8776fc78_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
8d2582d53acc97279185b91b8776fc78_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8d2582d53acc97279185b91b8776fc78_JaffaCakes118
-
Size
261KB
-
MD5
8d2582d53acc97279185b91b8776fc78
-
SHA1
9cf90995b095ce2a8db4704bff20d12afc8d3b79
-
SHA256
ca84ab9b66de92bfb1a27d031d319dd85107ccb6e9130ca2474952d7f2156dcd
-
SHA512
174bcbdd14b9f24b1d7fabfbffb9ed132cf301594a8bd898157a05f300b94af0c69d331be0678df5b6df82d2b157fbce292f2ade4bd0bd546993053270ed2f4f
-
SSDEEP
6144:SDL99vRHCge7tvpsXPoBQfFMHqg9+Ly006n7QG83YV:opHCgeJv0oiaZ9+G00m7QGQs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8d2582d53acc97279185b91b8776fc78_JaffaCakes118
Files
-
8d2582d53acc97279185b91b8776fc78_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.textbss Size: - Virtual size: 190KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 253KB - Virtual size: 256KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ