Static task
static1
Behavioral task
behavioral1
Sample
0859fa5d01c147b7a433b8887c2bf73e_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
0859fa5d01c147b7a433b8887c2bf73e_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0859fa5d01c147b7a433b8887c2bf73e_JaffaCakes118
-
Size
168KB
-
MD5
0859fa5d01c147b7a433b8887c2bf73e
-
SHA1
22fce9e97a98452b1ca6707022a97c6a359da92b
-
SHA256
d315a81e9c52f63919df202a6c9ab44491ff3e1ceee0a0e9e9bab02ef98dddf4
-
SHA512
5cb1561fd8bfde6cc3c6090ca3d29c63828f1a1384361ff841d6b758a5166136f2bb4940894323ab3c7aba751baa66fffcf2d8b053d9156ff4b07f73282afeb0
-
SSDEEP
3072:fP+jRMcvsLJp1zkzOT62oUcG4Nq4mQ7ZB1GArWdVDl:sB0Jpf6dN/q4m8ZB1GNfR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0859fa5d01c147b7a433b8887c2bf73e_JaffaCakes118
Files
-
0859fa5d01c147b7a433b8887c2bf73e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 40KB - Virtual size:
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ