Static task
static1
Behavioral task
behavioral1
Sample
8da2c1f6a1eda0e698f920bdaee87b7e_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
8da2c1f6a1eda0e698f920bdaee87b7e_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8da2c1f6a1eda0e698f920bdaee87b7e_JaffaCakes118
-
Size
52KB
-
MD5
8da2c1f6a1eda0e698f920bdaee87b7e
-
SHA1
b888fd4d0c1ec37b81a97ce0c1d367d24afd36a8
-
SHA256
b008668c4123963c6f5ab178bba94a94ebe9a13a1250d44910eddc6674f1b256
-
SHA512
8fb355738a02ddd7ffaf3d3c4ada9b1d756954482bc12cbd61385913f864665f1eae3e912fa47ad828b46d1791593378ee9331516aaf7c27a49ce5378bd54135
-
SSDEEP
768:Y4SubizvcgM2nhqj0deY9mtXDgrrlRKjezKeX+HE1v6EKLU2RQ2XLwv/Vjfu:wue7M2nh5deTzgrhgjUKeXFOU2RQ20
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8da2c1f6a1eda0e698f920bdaee87b7e_JaffaCakes118
Files
-
8da2c1f6a1eda0e698f920bdaee87b7e_JaffaCakes118.exe windows:5 windows x86 arch:x86
79b3362178937bf9559741c46bb9e035
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
Sections
.MPRESS1 Size: 50KB - Virtual size: 876KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 1024B - Virtual size: 800B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE