Static task
static1
Behavioral task
behavioral1
Sample
08a5ab8c563a04d41499e91f58505d79_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
08a5ab8c563a04d41499e91f58505d79_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
08a5ab8c563a04d41499e91f58505d79_JaffaCakes118
-
Size
189KB
-
MD5
08a5ab8c563a04d41499e91f58505d79
-
SHA1
d22a54235e086df115ed25eb9e615b9936a36e9a
-
SHA256
a68bab97f9e498e73998a446ce364fde670951de99690a0f29c7d5f150be5452
-
SHA512
69f2664dc30c3582d0540f1cb1be9f4c999881354249f5b48dd16eca97b84a67fe7935eeb1ec04b4216eaa43cb00d2161bdf7cfb8899b2232171e72107605022
-
SSDEEP
3072:oq3+pjKRy2o5pJD92PEo7eJJZjlbkPnkeZoqJZ:oq3+pWqHoPX7exWZxZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 08a5ab8c563a04d41499e91f58505d79_JaffaCakes118
Files
-
08a5ab8c563a04d41499e91f58505d79_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 130KB - Virtual size: 129KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 35KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 22KB - Virtual size: 449KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 176B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ