Static task
static1
Behavioral task
behavioral1
Sample
055fbb1f7dd69f7fa35851d44e7f98e8_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
055fbb1f7dd69f7fa35851d44e7f98e8_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
055fbb1f7dd69f7fa35851d44e7f98e8_JaffaCakes118
-
Size
46KB
-
MD5
055fbb1f7dd69f7fa35851d44e7f98e8
-
SHA1
18ea8c3a7838ff9254c980131073e8d0ab2dbdf1
-
SHA256
a2590ab70f70416febab21f52aefa7e82a1d4eacfd36aeb8d7b3c04292269d26
-
SHA512
e0447648dd5780bf856039e4281668fd2a283d6ff29a503b8c12b8b69fe4d513e81b139fd165652c4440615cc6a4fc158c7db7d7778217fbe2baa8e3299818a4
-
SSDEEP
768:c9WIF379kKZdC9stKU0v8iAs/SPL4gmJUC3FGAr3ymsfM:uFp+9sF0vYs/SzZmuC3s+37
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 055fbb1f7dd69f7fa35851d44e7f98e8_JaffaCakes118
Files
-
055fbb1f7dd69f7fa35851d44e7f98e8_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 16KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE