Static task
static1
Behavioral task
behavioral1
Sample
8c390087b364bf7660523e846725995b_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
8c390087b364bf7660523e846725995b_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
8c390087b364bf7660523e846725995b_JaffaCakes118
-
Size
408KB
-
MD5
8c390087b364bf7660523e846725995b
-
SHA1
280ff614b5220b7a6478b55bd54c5666cd316e48
-
SHA256
2cf9856fadf46a961b4489ebf1069748cc2686863fb59cffc8954507026e80a5
-
SHA512
c576f4947ca5a83f82767c157f7ec371c4e787e1859d193eb25f3ff39d83b346c889f63718c8047d354a3f425084b604a5df57522e6a3ed68a7c280b3f17d02c
-
SSDEEP
12288:51r2Qn99cyyfAyL/jT9iRLl6WCUUSgLzK2ad1+z:e4yfAyL/jp0R6UUSgXK2C1G
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 8c390087b364bf7660523e846725995b_JaffaCakes118
Files
-
8c390087b364bf7660523e846725995b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 128KB - Virtual size: 127KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.yorll Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE