Static task
static1
Behavioral task
behavioral1
Sample
054ff1c6796d7013695f09608bbc51c7_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
054ff1c6796d7013695f09608bbc51c7_JaffaCakes118.exe
Resource
win10v2004-20240419-en
General
-
Target
054ff1c6796d7013695f09608bbc51c7_JaffaCakes118
-
Size
261KB
-
MD5
054ff1c6796d7013695f09608bbc51c7
-
SHA1
a6e1dac9da1f8f250fdcb5d41e45c7901c85f8ec
-
SHA256
95b678b905f6f05d0c72819161eabc20e494d0b9383b58f0bf872434e6401680
-
SHA512
ffa8b2ead8edbe23c7ab2ec0acbf10a52747b5ff55131bfda524f094f3f9f6659027bafd5d442852faad3dff93e8c85e2d1c5f264ff2d4972fe0f42616e2cdfa
-
SSDEEP
6144:lF/ezrXgL+Y7p3fxYduoJQH5nmn14mUdMpWlAc9DFpGa3RbI:P/grQ579fxYRJQZnY4vJLvMQM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 054ff1c6796d7013695f09608bbc51c7_JaffaCakes118
Files
-
054ff1c6796d7013695f09608bbc51c7_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 32KB - Virtual size: 30KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ