Static task
static1
Behavioral task
behavioral1
Sample
8e3be384fb2b0a6ee03dde420523c866_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
8e3be384fb2b0a6ee03dde420523c866_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8e3be384fb2b0a6ee03dde420523c866_JaffaCakes118
-
Size
937KB
-
MD5
8e3be384fb2b0a6ee03dde420523c866
-
SHA1
b0e2dded9c9cfd442e9213d691fdcb3fd43d6f2a
-
SHA256
eb42728eec4b4f9e08e3d69e8ae511b6b6930dac7eb34c07f0ee7453da889b96
-
SHA512
413eed1f276e640889e9c9f8608697d1f8fbdbbafb88f10dfdfa0ae331bf300e680e67b813f33b573b181eb0460d95b51a543069e09fa58ca120bcc2780f1f96
-
SSDEEP
12288:d4/ARWDa/mTtLkYyTim0K5ySgPhqULqkN1qHxQ/D0S/g0Pb:dIAcTt4YC0WgPhqULqpubRb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8e3be384fb2b0a6ee03dde420523c866_JaffaCakes118
Files
-
8e3be384fb2b0a6ee03dde420523c866_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 749KB - Virtual size: 748KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 187KB - Virtual size: 187KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ