Static task
static1
Behavioral task
behavioral1
Sample
05d4925a667d4a03418fd713837cd1f8_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
05d4925a667d4a03418fd713837cd1f8_JaffaCakes118.exe
Resource
win10v2004-20240419-en
General
-
Target
05d4925a667d4a03418fd713837cd1f8_JaffaCakes118
-
Size
45KB
-
MD5
05d4925a667d4a03418fd713837cd1f8
-
SHA1
bb8d3ff02afdea837c6fab14d148ce4905319e8e
-
SHA256
f2a79a60b1e8e7a143877905705810a265c65bdcd74793258a9d997d7a33269a
-
SHA512
20071efe4f98acc911b6f0a2700d49592ec30c94a1e67381b9ea0ef1bc0c2544d29a9f4713bbf97929c2e2ae5c6d7577603a3498257279431a0d2d11e22a4afd
-
SSDEEP
768:/EU07c92/EyTAYtxqfGNC0klI7C8yOvi3eax2OK3bOixWVNJPgP:/g7wc1aGNC0klI7CPN3xabOixWVE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 05d4925a667d4a03418fd713837cd1f8_JaffaCakes118
Files
-
05d4925a667d4a03418fd713837cd1f8_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 30KB - Virtual size: 30KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ