Static task
static1
Behavioral task
behavioral1
Sample
05c278ca848524a9a6d73b623dafb9ce_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
05c278ca848524a9a6d73b623dafb9ce_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
05c278ca848524a9a6d73b623dafb9ce_JaffaCakes118
-
Size
672KB
-
MD5
05c278ca848524a9a6d73b623dafb9ce
-
SHA1
ae9677a46549aaf415cf9870f2cb39756366a56a
-
SHA256
3400962d63c698144de18c7c0a805aec0802770f8977cbf00dadad42b353bd3e
-
SHA512
bf55415bc7edcfcb1ee4b118e74e8775c7103f96d83b4fa2a0078af7fb51661a936b7f2adc82107c2e67df18f2b508ff65e0b2d8f3fe69cec3a2c39870a56c54
-
SSDEEP
12288:A7KCGktFf1LyqEsgZ/2wb83QSQNHdFhBXv4xt1HLrOF3Z4mxxWIL8Z0oVfK7g:2Kdkz5tEJ/2wuFQDFbXwxtpLaQmXV5oX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 05c278ca848524a9a6d73b623dafb9ce_JaffaCakes118
Files
-
05c278ca848524a9a6d73b623dafb9ce_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: - Virtual size: 352KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 359KB - Virtual size: 368KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 312KB - Virtual size: 316KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE