Static task
static1
Behavioral task
behavioral1
Sample
8d4fc2604e05a0b88df0ed51345a388d_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
8d4fc2604e05a0b88df0ed51345a388d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8d4fc2604e05a0b88df0ed51345a388d_JaffaCakes118
-
Size
109KB
-
MD5
8d4fc2604e05a0b88df0ed51345a388d
-
SHA1
26a71043dc28ac9d411bd9dbdd7f06d3e8e69b38
-
SHA256
744f6739d4670af617c7c2e5ed74e2d28d787281e3b64f8ce7b626cd9ac39fe2
-
SHA512
54cd887a3300eac24b56805b83ca6a1bbbf85bf710fa612ceb6322981c5463b078824338c227e48771c39221da82713bc49e2df718c06cbd1a70cd546f942ee6
-
SSDEEP
3072:wcXtGW3hZiCglHNwHAtuttsktfdn/6MRfCvGzSEErEr:zwUniLltwgtuUGf5RKvGzPErEr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8d4fc2604e05a0b88df0ed51345a388d_JaffaCakes118
Files
-
8d4fc2604e05a0b88df0ed51345a388d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
tk90 Size: - Virtual size: 52KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
tk91 Size: 75KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
tk92 Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
tk93 Size: 30KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
tk94 Size: 1024B - Virtual size: 524B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ