Static task
static1
Behavioral task
behavioral1
Sample
8e385b6197c82885d7fdd2c96cb4d740_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
8e385b6197c82885d7fdd2c96cb4d740_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8e385b6197c82885d7fdd2c96cb4d740_JaffaCakes118
-
Size
124KB
-
MD5
8e385b6197c82885d7fdd2c96cb4d740
-
SHA1
aeee6a9a51b4bbc9d981ba17274e473db91b9e5b
-
SHA256
19f1dccf8191a8cb4b68b3f81f047e8a6ff3cdf6713bf513206bff7be6cefb9c
-
SHA512
59718ed11edb33143e1598146e1c0ae70df0eec372c0451a04ef4eb89658227d3481fbd382915bbe09cf6bbc08c0b0057b247f79d22965b40acfe267944b2795
-
SSDEEP
3072:nXY1KrLrSfkh8G0HvQYbPVgIq6uX6MprpM0ouxsn4TWm:o1vqr4QYbPVgguX1prpM0o+Cm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8e385b6197c82885d7fdd2c96cb4d740_JaffaCakes118
Files
-
8e385b6197c82885d7fdd2c96cb4d740_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: - Virtual size: 144KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 119KB - Virtual size: 120KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE