Static task
static1
Behavioral task
behavioral1
Sample
05219392144048cdbe0e2d82e30a13aa_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
05219392144048cdbe0e2d82e30a13aa_JaffaCakes118.exe
Resource
win10v2004-20240419-en
General
-
Target
05219392144048cdbe0e2d82e30a13aa_JaffaCakes118
-
Size
622KB
-
MD5
05219392144048cdbe0e2d82e30a13aa
-
SHA1
9efffd88810718e48a13491cbabea42c1cd78ab5
-
SHA256
aa7f21ecaef638e1780c03ef6498dd46886325a4182a76dec02e0803a5bfef71
-
SHA512
a57df3475a400e4a45e7cf8f757f6549c8074a72b67790a60aff9a73bb3d36d655da8c54243909778b516c2e0c03a6187778049188cfc73f5494c3669c8b560b
-
SSDEEP
12288:51bjKl2FOeaDfegucGP5Oxv0CMjv8k7wAkbFkhyMz/7+0FQmwgXf:51bj42FOUc2+vKjKRRkhy2aDKXf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 05219392144048cdbe0e2d82e30a13aa_JaffaCakes118
Files
-
05219392144048cdbe0e2d82e30a13aa_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 50KB - Virtual size: 50KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ