Static task
static1
Behavioral task
behavioral1
Sample
8df94beed4cef6df7b0a3e20a5d9b2c3_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
8df94beed4cef6df7b0a3e20a5d9b2c3_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8df94beed4cef6df7b0a3e20a5d9b2c3_JaffaCakes118
-
Size
331KB
-
MD5
8df94beed4cef6df7b0a3e20a5d9b2c3
-
SHA1
e3563535e356c7d2f29aca26c55aafc1125b539a
-
SHA256
fa843061eddb2f324a0952ff340a36305996267d2a93d86ca75b8692b1d6779d
-
SHA512
6125640ac26ab6c6f5bbf6478a4310000b6fd42b6b1798ff61793571a874db2122d7c455200f42b6ff2f3280507236407fef498cbfc3036e80157b80fae9225d
-
SSDEEP
768:aAdODkZYVlIXqM++w1YU79Fu3cPKX/W1ifuDzpGkX3xJf7CmsTyNRhvX:UKY+wuMaWAfuXpjCmsGRvX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8df94beed4cef6df7b0a3e20a5d9b2c3_JaffaCakes118
Files
-
8df94beed4cef6df7b0a3e20a5d9b2c3_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
2V\�M�#� Size: 308KB - Virtual size: 308KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
o5��яHK Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE