Static task
static1
Behavioral task
behavioral1
Sample
05f761685bc3963c5d862c926406be40_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
05f761685bc3963c5d862c926406be40_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
05f761685bc3963c5d862c926406be40_JaffaCakes118
-
Size
117KB
-
MD5
05f761685bc3963c5d862c926406be40
-
SHA1
460f2f20e1ba599c4080dddf786c4b98714984d0
-
SHA256
c1ed054eb6d8d1de192a83e0d8528b3bfa64b375bdff8c98b4642a4605308243
-
SHA512
79d8cecd7903bc596dfe479ece5aa96943795f38b0f42e357f574f9a517c6156b921fe3eaaed7978b9db253499e7cce621268ec37e5c412e6c823c6425ace99a
-
SSDEEP
1536:dM3NMZyJbpKFXGmW8XRRAtI/jSD7p2Fq0OfDcclRBlG6im0/crGIYnHOKVJjJehG:rkJaRh0Iu/AucgR66imSI9KpehC0aPDX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 05f761685bc3963c5d862c926406be40_JaffaCakes118
Files
-
05f761685bc3963c5d862c926406be40_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
4 Size: - Virtual size: 204KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
g Size: 116KB - Virtual size: 120KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
jmn7l Size: 97B - Virtual size: 613B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE