Static task
static1
Behavioral task
behavioral1
Sample
8de7815c41c21e5956235aa122c31512_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
8de7815c41c21e5956235aa122c31512_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8de7815c41c21e5956235aa122c31512_JaffaCakes118
-
Size
87KB
-
MD5
8de7815c41c21e5956235aa122c31512
-
SHA1
d08a4035213c5af2a8a04aaa1c6ea3251ba03b91
-
SHA256
a0a69a0ee33ba85d6be4a389f134a78234b1d1704bc93186c8d59257edfb06e8
-
SHA512
848c8e9ab52f18d0267450ed9491ec76763adae6a8bb42b7a62023848a563bf073701435d160b9a57e02da486ba54a35816e432ca45d45332f279717dafcc991
-
SSDEEP
1536:G/3xMrEHu3DNfRhzpOJT7+82IDa1/tvUA9nlO9bqhPagQPciCwXtBM:OhMr3DF0Jv+82aa1Z9nk9eO0XwXU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8de7815c41c21e5956235aa122c31512_JaffaCakes118
Files
-
8de7815c41c21e5956235aa122c31512_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
E Size: - Virtual size: 200KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
X Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE