Static task
static1
Behavioral task
behavioral1
Sample
05e361d6b947fa66eb5745fca5882899_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
05e361d6b947fa66eb5745fca5882899_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
05e361d6b947fa66eb5745fca5882899_JaffaCakes118
-
Size
27KB
-
MD5
05e361d6b947fa66eb5745fca5882899
-
SHA1
69791ed9e4b49767366a8ce7cd769d0d2025b515
-
SHA256
9e071e65b8d47aeab69ba7c90e951c790ca6e2153e1d746908c78be48f7b3dc0
-
SHA512
364ad00d038e19a88715a6342eebbdc018dedc7cbb77b92844773920d97286dbe6456beeb4abf69866d8c45dcdf5f9f5ec29976daf9e2b66c5506f235a0121ed
-
SSDEEP
384:M6NRAnR11q8h0n3dDWR98Ee2NarvYcwte55JjT5j4ibDj4F9jT9f4mYp1/jaWlqr:5cNmdDK9LeGteXju4Q9H9Q9p1eWQOU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 05e361d6b947fa66eb5745fca5882899_JaffaCakes118
Files
-
05e361d6b947fa66eb5745fca5882899_JaffaCakes118.exe windows:4 windows x86 arch:x86
9ec6a573d2e74bf19d7546b3a6b639cf
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitThread
Sections
�`�cjAP Size: - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
�.�x?F�~ Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
U�]�hsT� Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ