Static task
static1
Behavioral task
behavioral1
Sample
c8ce81361f3c632c9bdcd0c9f221c6c7_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
c8ce81361f3c632c9bdcd0c9f221c6c7_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c8ce81361f3c632c9bdcd0c9f221c6c7_JaffaCakes118
-
Size
53KB
-
MD5
c8ce81361f3c632c9bdcd0c9f221c6c7
-
SHA1
b6aa630692ff7cab87cb37288f93c8d4d9296662
-
SHA256
89e772693ad010473848d6f7d12c1d26ca0329bf1a1b8afb3bc4608715dde239
-
SHA512
44a9ee40b5116239335e4cd709781d1f7ec0f679e45c4926593cf8db562285f82fb5ad1edf748daaffb16a2cfa690d37150608ee040665277d8b7bad27322e3b
-
SSDEEP
1536:/tCvtUdbZYf5O724a5zyhbCHgryXkfZ2Q:/AvtUddYfO2tz1u2Q
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c8ce81361f3c632c9bdcd0c9f221c6c7_JaffaCakes118
Files
-
c8ce81361f3c632c9bdcd0c9f221c6c7_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
vcasm0 Size: 328B - Virtual size: 88KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
vcasm1 Size: 52KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE