Static task
static1
Behavioral task
behavioral1
Sample
08cb24472d62ea4f07aba2e4d073cb57_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
08cb24472d62ea4f07aba2e4d073cb57_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
08cb24472d62ea4f07aba2e4d073cb57_JaffaCakes118
-
Size
45KB
-
MD5
08cb24472d62ea4f07aba2e4d073cb57
-
SHA1
46cc1f3fc4869a7c9ef0ca11fa83445da4f5ec9f
-
SHA256
ec3e4e0b9434fd9a595f871f1d034cf3ca52256b51d04a0285fa47073fb354f9
-
SHA512
79cd0157d84f5d181a43f9a39f232f58ae08a09c9bea1c9269b97467c25aecbf98a27c7f8a1ecf09d5e02c68c9b65c279c547da3d6d9bd8a74ad6c36a15e2c1c
-
SSDEEP
768:E1AuwHyeFo6NPIFAoslbf8eRYLGXdoIFbb5omuKWcbsvwnoT9D88888888888JXR:EOxyeFo6NPCAosxYyXdF5oy3VoKR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 08cb24472d62ea4f07aba2e4d073cb57_JaffaCakes118
Files
-
08cb24472d62ea4f07aba2e4d073cb57_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 26KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.raven Size: 13KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE