Static task
static1
Behavioral task
behavioral1
Sample
05223c65fc4494ab73cdb5897b85c477_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
05223c65fc4494ab73cdb5897b85c477_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
05223c65fc4494ab73cdb5897b85c477_JaffaCakes118
-
Size
50KB
-
MD5
05223c65fc4494ab73cdb5897b85c477
-
SHA1
87496f4d9d87e1e7e52604de5160ade8028cbedf
-
SHA256
bc41f0e4a7a4b43588687c1b984c38508f3d016dc8e50eba11eeab93074684ea
-
SHA512
f0cc9ce156d8b1abe3259ee28db074c3970fc831dbd5a8ec80f76b32226bd83ccf6af1a922fc1c8ff39734cb8e552d0673d7fa3ba6054507ff99b3ab7f722151
-
SSDEEP
768:4VRKzy/Y42LSsbj5M35wh6EDn8pt1+BC3ffng+YctRHmuB1CP1cRWhmYzLgy/U:SRIypbGM3igEWt2ag+/dFCCWhFjM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 05223c65fc4494ab73cdb5897b85c477_JaffaCakes118
Files
-
05223c65fc4494ab73cdb5897b85c477_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
[75175]0 Size: - Virtual size: 148KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
[75175]1 Size: 49KB - Virtual size: 54KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE