Static task
static1
Behavioral task
behavioral1
Sample
005dfa205145486c5100972c5d265d9b_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
005dfa205145486c5100972c5d265d9b_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
005dfa205145486c5100972c5d265d9b_JaffaCakes118
-
Size
270KB
-
MD5
005dfa205145486c5100972c5d265d9b
-
SHA1
20ee33cb706d3dbfc8b169f3c2af8a6168a96108
-
SHA256
2a2a3885c6217265bb772177c561ee646a2413426d49433ed8ff0a3a7f6bc0d8
-
SHA512
852c4365bfbadd48d81a18bc1d6e5641453999570b5ef18a5713cddc3a9283b568733bc2d5e69ccb6fca7ed571cc366ca91dfffc10f7a24b682181c79f081239
-
SSDEEP
6144:CHSPdg+FyEqx+etv4qjCMADnvIoglC2w2uIoCR:CkdJyEZEvRCzDngogw2uhu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 005dfa205145486c5100972c5d265d9b_JaffaCakes118
Files
-
005dfa205145486c5100972c5d265d9b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
WinLice0 Size: - Virtual size: 788KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
WinLice1 Size: 270KB - Virtual size: 276KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE