Static task
static1
Behavioral task
behavioral1
Sample
8dd8261fbd540ca36a4ee42b9d80062d_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
8dd8261fbd540ca36a4ee42b9d80062d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8dd8261fbd540ca36a4ee42b9d80062d_JaffaCakes118
-
Size
119KB
-
MD5
8dd8261fbd540ca36a4ee42b9d80062d
-
SHA1
0677de2b7df336b3aa3d43b07254eb90bac4490d
-
SHA256
9f4031ccd4e6ebb40e5216cc0abc6d78dfaa02bef9bf341526d64a1bcf2c0f56
-
SHA512
b019c1ea16dfc48241aec1bb94475b65506ce7852626b3a4dc75d5751bed68c0eadb845c4fdafe50a05cbf3384fbb677dcb0f83ad129052b1f291faa9f7639e8
-
SSDEEP
3072:UVway01bbrMbvT0q8O1cZPzQ7IXMBc+AMP+QfQEhxFyVU7JJtDy:Cway01wvP6bQ7yMP+DE827RDy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8dd8261fbd540ca36a4ee42b9d80062d_JaffaCakes118
Files
-
8dd8261fbd540ca36a4ee42b9d80062d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 11KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 98KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE