Static task
static1
Behavioral task
behavioral1
Sample
05ff092d6e6c74bd6f59e977f387c844_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
05ff092d6e6c74bd6f59e977f387c844_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
05ff092d6e6c74bd6f59e977f387c844_JaffaCakes118
-
Size
19KB
-
MD5
05ff092d6e6c74bd6f59e977f387c844
-
SHA1
648c746c90b0b99ec57634867e530a4d8c60f847
-
SHA256
0ecede07a25db8932e9d35c1193f3f64311a3d7ca6f2d43029465fd922db2418
-
SHA512
2c5d887e5446dcae9dc1800eac1aad77ba6f3db2e21f681c7a0ba3c6c1e0b387e055266089eb2d2dbe9cd30e3ec80b7cb8633834b9830b1206b1da9b4d39ea82
-
SSDEEP
384:otGhyYkWx/B/UocgadjxVUnuITg1ywr+x0BYvkgOSkaeS+7ZZyO:a7YXx/B/Uo4jjU1g1Y6zZPF1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 05ff092d6e6c74bd6f59e977f387c844_JaffaCakes118
Files
-
05ff092d6e6c74bd6f59e977f387c844_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 98KB - Virtual size: 98KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 49KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.hvb Size: - Virtual size: 57KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.hv Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ