Static task
static1
Behavioral task
behavioral1
Sample
05f5e706bb0b1c1c5a84032dd2a7a971_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
05f5e706bb0b1c1c5a84032dd2a7a971_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
05f5e706bb0b1c1c5a84032dd2a7a971_JaffaCakes118
-
Size
370KB
-
MD5
05f5e706bb0b1c1c5a84032dd2a7a971
-
SHA1
95e3a87aa3d0194eb7d62fbd59414189ed1c3baa
-
SHA256
34e4f0865908240bd54b5fa6c21c930d5823cb1c49e4f382e3a2e5dba834a793
-
SHA512
4e3c2524541e6db83c5198452415b603e21a2478435c0c1297a42a2e2ace9e9d7cf708ced19501ae5c67d80ebb74b4ce14f64ef24bc35e8334363753bac35fe9
-
SSDEEP
6144:Wm62ozgL7rEEWUBCko3z8h2pvtekIYkFkPFLScxZL7tAlBDwRB1BirDkjHg0+zb7:ULML7rEZkU02pvLbkSPBScztAlB8urDM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 05f5e706bb0b1c1c5a84032dd2a7a971_JaffaCakes118
Files
-
05f5e706bb0b1c1c5a84032dd2a7a971_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.data Size: 361KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ex_cod Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ex_rsc Size: 184B - Virtual size: 184B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
jx Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
jx1 Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE