Static task
static1
Behavioral task
behavioral1
Sample
8d8805f27f9e56b28c293fcf9bb301b4_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
8d8805f27f9e56b28c293fcf9bb301b4_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8d8805f27f9e56b28c293fcf9bb301b4_JaffaCakes118
-
Size
1.4MB
-
MD5
8d8805f27f9e56b28c293fcf9bb301b4
-
SHA1
6c58715da051c56db8a70a0c3c838b502fc196de
-
SHA256
ec190cde5ee64eea49d9b11aabedc841969461bc0b7aa3b7901925bdc0de08d8
-
SHA512
d5bbc24b970cf6633bd3fe36325c45d8cdcbbea7a9d651ca378346f9cbdfc6b8dad6685381df939029a4fae31d4fb885d2a27f01ea7fcec1f1a1c5506cd46cf3
-
SSDEEP
24576:kfxBpvV9Jk7/i32/MN3Yvd9occO/H7GnfcZ/+VKdZ4dllPdo:qBpd94HcMCnhVlVo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8d8805f27f9e56b28c293fcf9bb301b4_JaffaCakes118
Files
-
8d8805f27f9e56b28c293fcf9bb301b4_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
xd Size: 1.4MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
in Size: 64B - Virtual size: 128KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
sydintyd Size: 80B - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
iotydj Size: 64B - Virtual size: 328KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
otyej Size: 64B - Virtual size: 176KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE