Static task
static1
Behavioral task
behavioral1
Sample
8b737cb6310fa481e30c7b05ff22d572_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
8b737cb6310fa481e30c7b05ff22d572_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
8b737cb6310fa481e30c7b05ff22d572_JaffaCakes118
-
Size
216KB
-
MD5
8b737cb6310fa481e30c7b05ff22d572
-
SHA1
708043eaa2cd40f98d4a27c7898cae529558c8e9
-
SHA256
6eaa7aa3bb4aa0fe947d0aa4105fd8538e0efeb98756227175e54099eb943a04
-
SHA512
db4e1ce518eeafaf8c5534c60692dbc43681d17626f29cb6da8269b9c278e686bc43872d3e35c567d046d3203ca40359307e64ce8b8dbcaeac1c7954eecbc2b5
-
SSDEEP
3072:RVsZDNU7WcdhYFekjwliMTs1tLtPVDC2VwAZE58Dwgbf4QdV8p45:R2wWSuFhwEqsLZJVky7H845
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8b737cb6310fa481e30c7b05ff22d572_JaffaCakes118
Files
-
8b737cb6310fa481e30c7b05ff22d572_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
dret Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
����k� Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
avira Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
drets Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
i�el Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE