Static task
static1
Behavioral task
behavioral1
Sample
8d1d363ab750b4ab96bb48e1b4faf182_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
8d1d363ab750b4ab96bb48e1b4faf182_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8d1d363ab750b4ab96bb48e1b4faf182_JaffaCakes118
-
Size
71KB
-
MD5
8d1d363ab750b4ab96bb48e1b4faf182
-
SHA1
6c8b50cdb5aae01d4521dc972344b43301e99d32
-
SHA256
c912dca290dc56b91a92867582239cb46c3f7415b0d686291a223f77761fa1eb
-
SHA512
82710c8fde81f93603e8d503579000041d9dfd5125d14725e6d497afe15abbea912e9bf4ac0876a5679e60f1a29d44b4b8b965b5e68a35a1599d5337ca637a11
-
SSDEEP
1536:C1NTYY3ddexh0osdU+XwpyZ8wK3JEt0g6jDnb6k2QzJF5+ZEiA4gBCPpbhEG55n:C1NjNdQ0osdUKwpyZ8Rit0guDb6YztMH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8d1d363ab750b4ab96bb48e1b4faf182_JaffaCakes118
Files
-
8d1d363ab750b4ab96bb48e1b4faf182_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 100KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE