Static task
static1
Behavioral task
behavioral1
Sample
8457c46d0f4eb3d95356d3d5f27d3a9d_JaffaCakes118.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
8457c46d0f4eb3d95356d3d5f27d3a9d_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
8457c46d0f4eb3d95356d3d5f27d3a9d_JaffaCakes118
-
Size
1.6MB
-
MD5
8457c46d0f4eb3d95356d3d5f27d3a9d
-
SHA1
f81a43979fd664d820d136cb0731180b7edf7230
-
SHA256
6133595b57c88c017f35c670251425f4db837c7efd15d5de260db29da64f26ea
-
SHA512
9ce831cb5bff53278ed4a71166704628a2b676aa9a4c612af883c742948286089292aac8f6d9b7d01d620a7ca13e57ecf0dbbf7ef5d0595fc16464a5920cf3db
-
SSDEEP
49152:NZcX0JOG8smOxRUnTn14a93CMWRVQyVeLsduKLiwum:NekUG8smOPUnTn14ICpLQykLeuKLiU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 8457c46d0f4eb3d95356d3d5f27d3a9d_JaffaCakes118
Files
-
8457c46d0f4eb3d95356d3d5f27d3a9d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
PkitVeAq Size: - Virtual size: 504KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
tjJd0LEe Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
FdhDNiDA Size: 216KB - Virtual size: 220KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
z3aHTXXc Size: 203B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
x5qeLUzC Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ