Static task
static1
Behavioral task
behavioral1
Sample
8d38dcd9c980113f7f862ef7a3f17231_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
8d38dcd9c980113f7f862ef7a3f17231_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8d38dcd9c980113f7f862ef7a3f17231_JaffaCakes118
-
Size
12KB
-
MD5
8d38dcd9c980113f7f862ef7a3f17231
-
SHA1
0d7f0c5812b3549c0d5c545a78c7cb5fe44edd4f
-
SHA256
d3290ee38b9f488703e5f212cac177bf5c308f7a307f1bc170754f4182787d2f
-
SHA512
c51403773c480783311079efacbf7080c9cef324394bba8e6c9fcf7f3d56a9c2a79464ed7c967f871029d822b8be90b863d4f156aa00093033e781cd962aa33f
-
SSDEEP
192:1CPMYVrF5c2hAVbaksZSxDK+lQT4PW4UTGRN3sRbOJjm6uH:kxK68GSV5gcxuH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8d38dcd9c980113f7f862ef7a3f17231_JaffaCakes118
Files
-
8d38dcd9c980113f7f862ef7a3f17231_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 24KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 192B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 108KB - Virtual size: 107KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ