Static task
static1
Behavioral task
behavioral1
Sample
c8db490629359f4da5486dcc73f43be2_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
c8db490629359f4da5486dcc73f43be2_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c8db490629359f4da5486dcc73f43be2_JaffaCakes118
-
Size
237KB
-
MD5
c8db490629359f4da5486dcc73f43be2
-
SHA1
a1f3c3c33b52f5b80b68cd2b7a93822edc30ac16
-
SHA256
9cb0cd9956d43aa589d1a1d680708b103911d022e5bbe876834fcbde4dc0fd47
-
SHA512
2d0ad164a75047d3bdb88084284ef2980ad36115076560181b198d0ae74c34536a7ad21d2b473e22619abe4f2762fdba42d3d71c5982fa5390e74ef16ac0c913
-
SSDEEP
6144:kTGDkhImdKQdM/xdmnnWMipAqCILxjrb2MmLfn2d7udiDmzverFJe:kTwyIkDuunnWMe9Nb2Mxxu8qjSC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c8db490629359f4da5486dcc73f43be2_JaffaCakes118
Files
-
c8db490629359f4da5486dcc73f43be2_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
EXES Size: - Virtual size: 96KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
EXES Size: 23KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE