Static task
static1
Behavioral task
behavioral1
Sample
c8de1dc193fe228ae308e3fcc14fc2dd_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
c8de1dc193fe228ae308e3fcc14fc2dd_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c8de1dc193fe228ae308e3fcc14fc2dd_JaffaCakes118
-
Size
642KB
-
MD5
c8de1dc193fe228ae308e3fcc14fc2dd
-
SHA1
2b536edf7ec2ed52f1676a2e836abc2a4fd37748
-
SHA256
8500deffe387d3a5e7103b9dad789d379e779de5c5952a4cdab5f644b478e1cc
-
SHA512
12070090e1d502dc78bd7a756dff38a273cc8b5ac2821733bb6f7f0a1b91a73bf6fe3aed35fa198f54e1c3dbaaf1c3b4a16e94b6bccc43b1d7c8d69d2c980fef
-
SSDEEP
12288:L/VGtaaiAAUiHR/PF308WmR3GXcPtN7aUPj/HYPday/0/+x0bRtE+D26bCr:rVXaiAAUsRnS8l3jzaUrHYPMysqZu0r
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c8de1dc193fe228ae308e3fcc14fc2dd_JaffaCakes118
Files
-
c8de1dc193fe228ae308e3fcc14fc2dd_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 914B - Virtual size: 180KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tss Size: - Virtual size: 3.0MB
.packed Size: - Virtual size: 460KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: 475KB - Virtual size: 476KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 164KB - Virtual size: 168KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE