Static task
static1
Behavioral task
behavioral1
Sample
05dff1777b9eef2b3f9790162d6e9fbf_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
05dff1777b9eef2b3f9790162d6e9fbf_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
05dff1777b9eef2b3f9790162d6e9fbf_JaffaCakes118
-
Size
117KB
-
MD5
05dff1777b9eef2b3f9790162d6e9fbf
-
SHA1
61942a831d3c58284d48a3163643a55f3ba8849a
-
SHA256
93417fbe853ddf315b9aec0104598943d74b5062781a72f53ccaf1221acaca1a
-
SHA512
c638497c3bfc180e45dd42ad4babed8dbd3ba4cfcd40a25391ea0d2d0bc6d26a26c938d198408cb43d18ee290a4afa384ac15301164482fa37b36d23697c1111
-
SSDEEP
3072:+xzEY17Sasm0131o/wwdyj4SNCyd/CFz1rF8dKBbfeS:UzESb03o/wK1S1OzvO8fd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 05dff1777b9eef2b3f9790162d6e9fbf_JaffaCakes118
Files
-
05dff1777b9eef2b3f9790162d6e9fbf_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 65KB - Virtual size: 128KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 17KB - Virtual size: 364KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 73KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE