Static task
static1
Behavioral task
behavioral1
Sample
8ed0a05a0395d4116157155f4d65402e_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
8ed0a05a0395d4116157155f4d65402e_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8ed0a05a0395d4116157155f4d65402e_JaffaCakes118
-
Size
52KB
-
MD5
8ed0a05a0395d4116157155f4d65402e
-
SHA1
2874b48810c08ed683ece4301c72a6e2d2fcdbf5
-
SHA256
7c2b14e6df68225c5e056e0230eca1baf5f7d0d51d680b5844dccb91b6ff750d
-
SHA512
c4fff7e8ea7fda35b33aa0f0f15b25bf73e8b9a534332375ed18f0b7865f7326e5bd09539782a1f05bf0f184a4aeb46a6d0b024d05ee4bb4b83ccf1b6d0d943f
-
SSDEEP
1536:KRsMgBK49kwtQaQuXSoOmPV1OpX15JYKf2u:/HKCkwteXmk57f2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8ed0a05a0395d4116157155f4d65402e_JaffaCakes118
Files
-
8ed0a05a0395d4116157155f4d65402e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 512B - Virtual size: 124B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 1KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 308B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 396B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ