Static task
static1
Behavioral task
behavioral1
Sample
05e66bc7d7e759dfbc50d45e699fec11_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
05e66bc7d7e759dfbc50d45e699fec11_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
05e66bc7d7e759dfbc50d45e699fec11_JaffaCakes118
-
Size
24KB
-
MD5
05e66bc7d7e759dfbc50d45e699fec11
-
SHA1
aaaa80ba3ed0258ee988fd06f8bd1581c20dfe21
-
SHA256
b45c23b50661eed3354e950e77c385d21ad41b19b693148057c0329727af2eef
-
SHA512
6eed194a061d3908ef91d66a4c5b5f1cd449e2699252200855862d58b9e46b560c61eaa227655ed5929b5a4866dddbd9d8b4e6c5f4c6cd03cc485c547de3c055
-
SSDEEP
384:Rf2b0xu5/0IgUvpee+D+7NbVV6X75NwpAJZa1H1YlZzApy8+ThIuVAOLFgsl:p0pMqpee+ah6XtmGHaB0Ap0hLv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 05e66bc7d7e759dfbc50d45e699fec11_JaffaCakes118
Files
-
05e66bc7d7e759dfbc50d45e699fec11_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.Upack Size: - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 23KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE