Static task
static1
Behavioral task
behavioral1
Sample
c8d6d3b4114b6aa521d90199ebff7fcc_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
c8d6d3b4114b6aa521d90199ebff7fcc_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c8d6d3b4114b6aa521d90199ebff7fcc_JaffaCakes118
-
Size
320KB
-
MD5
c8d6d3b4114b6aa521d90199ebff7fcc
-
SHA1
9511557d985e6d87e00b3bb75a8d968a71d88a65
-
SHA256
47a3f717830eac6d1e51a9db5ea806ca4a1549373a4d7828120dae17169fd12f
-
SHA512
b70a9f319b1164bad570f99da638e9319601f6680e99c79abf6569cba4254ab30fd100be4084ca55e702b2a4a955724f177dcf0887dcf49b718e9f94d1f476a1
-
SSDEEP
6144:SlfUmxcxhXlVoj8571Yykat9okPjg/+pnxvrulHZCm3w18ZvHbdUZoYK:SlsmxghXlWjoxYyntOwjg/wlmZCmg18M
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c8d6d3b4114b6aa521d90199ebff7fcc_JaffaCakes118
Files
-
c8d6d3b4114b6aa521d90199ebff7fcc_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 1KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ap0x Size: - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.shoooo Size: 317KB - Virtual size: 320KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE