I expect there are aluminium plates bonded in there. You can check by using one of those metal detectors for finding hidden pipes and cables in house walls. M8 sounds correct. As for length probably 20mm longer than the depth of the holes in the cleat, but siggest you wait until you have drilled and tapped the hole. Use plenty of polyurethane sealer when you assemble, including on the threads to isolate them from the aluminium.