Static task
static1
Behavioral task
behavioral1
Sample
8d70dc631d5f1c6c89712874035d3347_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
8d70dc631d5f1c6c89712874035d3347_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8d70dc631d5f1c6c89712874035d3347_JaffaCakes118
-
Size
12KB
-
MD5
8d70dc631d5f1c6c89712874035d3347
-
SHA1
9ab13e7f8ace0c3be62d051bf1a5d4f8e365f385
-
SHA256
46685c2f5515b1bf4b0b010b629ba0c33c6f521e92b7cb20529af33c1438cd18
-
SHA512
6dd2f419e827e52e8aa5491ae5f3f0564e2cf8db584e688858294b734c8c77d77df66e834ff020c5dad46329911ca31fbd017a4b5cc8e0f2ccb1df22f5d10e8a
-
SSDEEP
384:I5pKyi0zKeLF/HztzrKemK3tbY6HNC7IW:OKy/d1rKemK9bY6HNuIW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8d70dc631d5f1c6c89712874035d3347_JaffaCakes118
Files
-
8d70dc631d5f1c6c89712874035d3347_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.Upack Size: - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE