Static task
static1
Behavioral task
behavioral1
Sample
05b556132b7663d00400aa8f420a5318_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
05b556132b7663d00400aa8f420a5318_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
05b556132b7663d00400aa8f420a5318_JaffaCakes118
-
Size
73KB
-
MD5
05b556132b7663d00400aa8f420a5318
-
SHA1
5403f80da9cbda96b3b00a5f5dab5ff163ede31d
-
SHA256
f84106fc6d97b07f6d5006708ff8b9a75d512e21ea6198b6dc6f6bafa88aebd9
-
SHA512
ffae8374eefa133ae347abb74ca057dafefcbc91c3953d3cfa7880b8f314dfab7a8a4341d4aea88681a5ff4837a48d5c4d29a2e1d0bd12ba320b3ad5815880bc
-
SSDEEP
1536:w45v46nm20xmvE784WU6hM/8D4XCPiFi0+HWmZb/q2Lj4Jz4y/CZ2EvdHZW:wISqEIU6hM/8DMCKFi0+rb/jL8h4y/qW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 05b556132b7663d00400aa8f420a5318_JaffaCakes118
Files
-
05b556132b7663d00400aa8f420a5318_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.Upack Size: - Virtual size: 212KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 73KB - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE