Static task
static1
Behavioral task
behavioral1
Sample
8e1340c8ce99f76771f0e589c3b0a950_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
8e1340c8ce99f76771f0e589c3b0a950_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8e1340c8ce99f76771f0e589c3b0a950_JaffaCakes118
-
Size
23KB
-
MD5
8e1340c8ce99f76771f0e589c3b0a950
-
SHA1
31c69003784e567801398cfa49e29b63bc9158a5
-
SHA256
0cdc32e774fa3ff3f90b4e6bb232b8df06ac256b8ebd154dc7ad16f1a45b5725
-
SHA512
d5052555b8fedaf7160e2a0658f0a3352282f9853d25fa416d3af155e2523f542a6dc66003d23bd263c6fc8520c568d17dde013b65d858ae544647393557681f
-
SSDEEP
384:WqbQy81m2vDDGxcZgQHxYjVkVY7VK/cS5ZIhG1hu/KCfmZ0BXCnwtWFU:a1m2nhZ5vVY7E3ZIhUhs7OZ0l9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8e1340c8ce99f76771f0e589c3b0a950_JaffaCakes118
Files
-
8e1340c8ce99f76771f0e589c3b0a950_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
kbniu0 Size: - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
kbniu1 Size: 22KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
kbniu2 Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE