Static task
static1
Behavioral task
behavioral1
Sample
a8c93e5cb8bb34781a4af97b9dd223da_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
a8c93e5cb8bb34781a4af97b9dd223da_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a8c93e5cb8bb34781a4af97b9dd223da_JaffaCakes118
-
Size
1.9MB
-
MD5
a8c93e5cb8bb34781a4af97b9dd223da
-
SHA1
8ae77e2e648c29508e982cfd484f6195473fa476
-
SHA256
8120ac7a7f10f3d2b530ef3249555d21db10b8fc9588d0985360ee857e399066
-
SHA512
024b7d80ad831913a9884f499fcb1f390c6cccf1d5eb859c4b7e869cd1b9978dda80ff0b17c714e70d02baca96afa34f714868c03719c05d2d4130dd10e41c0d
-
SSDEEP
24576:F5xu/dgvIJtJ/NRYtXgFn+Ij0Jm/0fRBOWbppTSRybCzBJ18L/jJ3G17gnkWoOmM:F5umI5VhQ03WNQ/yLkrlCF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a8c93e5cb8bb34781a4af97b9dd223da_JaffaCakes118
Files
-
a8c93e5cb8bb34781a4af97b9dd223da_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.Upack Size: - Virtual size: 6.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.9MB - Virtual size: 1.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE