Static task
static1
Behavioral task
behavioral1
Sample
8e8de0e6014de26e16b9cecd465c1897_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
8e8de0e6014de26e16b9cecd465c1897_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8e8de0e6014de26e16b9cecd465c1897_JaffaCakes118
-
Size
72KB
-
MD5
8e8de0e6014de26e16b9cecd465c1897
-
SHA1
380f617c25348c7c3672f0c13a516af9d3889839
-
SHA256
d020754f7f6f69555611fab99cfbe615497e1d95753799b64104ea23051dc653
-
SHA512
d7df14ba7e00e52def1f29edd56be0a9387c87f1b5f481f523571cf600d4ec9ccccf65434c19a022a17ae5a09557475eea77b52c75430f33cb5b1dcfea65c431
-
SSDEEP
768:vleJl32yhdZsGj2J+Z99EbFwfChzdYvNJukB7FmJTQfVCghpJbVg:vlUpbh9j9TiFwfmdYlUkB7HfVLpJbVg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8e8de0e6014de26e16b9cecd465c1897_JaffaCakes118
Files
-
8e8de0e6014de26e16b9cecd465c1897_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.d3ta Size: 30KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.r45ta Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: 3KB - Virtual size: 3KB
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ