Static task
static1
Behavioral task
behavioral1
Sample
080b43a611b930da3053d2397f343b54_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
080b43a611b930da3053d2397f343b54_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
080b43a611b930da3053d2397f343b54_JaffaCakes118
-
Size
203KB
-
MD5
080b43a611b930da3053d2397f343b54
-
SHA1
9fbdd2ba5cd6128e703392a30869e8e4cefaa7af
-
SHA256
bb7c0c36d8ef6fc9bd77e258a3e0cffdad777f7950aa6f83ede34a8e53f64f87
-
SHA512
21a8882b4a11165062e4f15908c66f56a8882d0f05e974649e3ce33cd8d5bc7e823b1ed8d4719ba66c9141be23fe3bc8dfb69597d054e81bd6c00eb66f1a531d
-
SSDEEP
6144:98KwWOgPRD68eDMlqd+mRFRrJjMnEWiM2:+ir8LDMbWFHQn0M2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 080b43a611b930da3053d2397f343b54_JaffaCakes118
Files
-
080b43a611b930da3053d2397f343b54_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.MPRESS1 Size: 1.8MB - Virtual size: 6.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 31KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE