Static task
static1
Behavioral task
behavioral1
Sample
8e12dc67977e51d7f8a9f19209c340e9_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
8e12dc67977e51d7f8a9f19209c340e9_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
8e12dc67977e51d7f8a9f19209c340e9_JaffaCakes118
-
Size
147KB
-
MD5
8e12dc67977e51d7f8a9f19209c340e9
-
SHA1
5c0422ed17892a1a980470837f2f70d4a5edcb97
-
SHA256
aa7dd6e91495c93c81e7a1b65b6689da8367db9b1538deb43a30f6036f288ad7
-
SHA512
dd017a16d8930b4743c625766a48257d61e6a8ec821ea5cdc013fe4e9462b088d8fe0ca3698ca338015dd2a8608644bf28faa985545fe36ecb2c183f9b22a205
-
SSDEEP
3072:CMMXVZeiVK3CTD0Tv05Cf4EmZlAckdCAqacE+hnLsVHruk:+CR3CbG4TlxkdVsLst
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 8e12dc67977e51d7f8a9f19209c340e9_JaffaCakes118
Files
-
8e12dc67977e51d7f8a9f19209c340e9_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 46KB - Virtual size: 45KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 3KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 92KB - Virtual size: 91KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE