Static task
static1
Behavioral task
behavioral1
Sample
8d7e89f38d827ea7aaf97c8b0bcf9725_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
8d7e89f38d827ea7aaf97c8b0bcf9725_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8d7e89f38d827ea7aaf97c8b0bcf9725_JaffaCakes118
-
Size
94KB
-
MD5
8d7e89f38d827ea7aaf97c8b0bcf9725
-
SHA1
f6204d082c2398594c7401f50e4df3a7adff1095
-
SHA256
d9f8d0d1e3eea45e388cce1809fdf5c737c8181099221db55d7a5a90772b9bb3
-
SHA512
326f6832cdba3b5c74d9f093f0f320ff0b02ce4d18560aa4cfc072a65876a8ee7ddaf5c71578281ed1f395ede94324b74c36b6d15a56319d6062ae2c5f00a987
-
SSDEEP
1536:+vGEMvRn1BU5FM7ElLi4JQPLxjRcfsj+cXsPTmV5/s0u1QGVNERyuxHm+T4py2gW:+u11H7APJI9j3KIPhs0aQGVuRUzb6W2m
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8d7e89f38d827ea7aaf97c8b0bcf9725_JaffaCakes118
Files
-
8d7e89f38d827ea7aaf97c8b0bcf9725_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 78KB - Virtual size: 828KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.nah Size: 10KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE