Static task
static1
Behavioral task
behavioral1
Sample
8d79d7e0e1d88a0ed974d6a0d1fc819f_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
8d79d7e0e1d88a0ed974d6a0d1fc819f_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8d79d7e0e1d88a0ed974d6a0d1fc819f_JaffaCakes118
-
Size
335KB
-
MD5
8d79d7e0e1d88a0ed974d6a0d1fc819f
-
SHA1
f383b269f62c9bd837e9e054221e8fb32f286da9
-
SHA256
241bbf644fb311ec8b8f120da42a7c9941564aa06029fc745299746e0a5d1a26
-
SHA512
6bcc9c5879f9c0406c6b22c99e25b006a73c7b9a02599e09cb3da396526a6da5060dec85a408afe70145dbf7b82ea2e5608c4386fc90231fecde2720dfeba6d2
-
SSDEEP
6144:d0+0Z8bBzNipRQlMyQxUnVW5GJZ2tNYLj8Mfsi+i4YgFVmErt:d0+1GI+FsVzYKj86stixgFFt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8d79d7e0e1d88a0ed974d6a0d1fc819f_JaffaCakes118
Files
-
8d79d7e0e1d88a0ed974d6a0d1fc819f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 134KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 155KB - Virtual size: 376KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE