Static task
static1
Behavioral task
behavioral1
Sample
8ea3ddf052eb9cee2d5d309fa6724f49_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
8ea3ddf052eb9cee2d5d309fa6724f49_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8ea3ddf052eb9cee2d5d309fa6724f49_JaffaCakes118
-
Size
248KB
-
MD5
8ea3ddf052eb9cee2d5d309fa6724f49
-
SHA1
5be3d460ffe8ca85a49b6164833018deb0d1eeed
-
SHA256
dd7d29994cf685aa472b8a13c9b118c669f5775acf2b0e5d6b0808974c9f5859
-
SHA512
da04c971f941b8c63cfcc2a015f0803846dcb345565e36e8dd29151542ef464b0e1c5ba73d514c0151e3fa9eb41a1abc48765392c3422faa3f8c083045321667
-
SSDEEP
6144:yHcDOLkLpOQeuZBWH+3s3YSKCmC3G9lisOdvXP5Az1W:ygOLkVOQeuZB4Plh29eP5A
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8ea3ddf052eb9cee2d5d309fa6724f49_JaffaCakes118
Files
-
8ea3ddf052eb9cee2d5d309fa6724f49_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 125KB - Virtual size: 125KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 105KB - Virtual size: 980KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE