Static task
static1
Behavioral task
behavioral1
Sample
085ad22311f69604c309b0ea850a2413_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
085ad22311f69604c309b0ea850a2413_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
085ad22311f69604c309b0ea850a2413_JaffaCakes118
-
Size
1.5MB
-
MD5
085ad22311f69604c309b0ea850a2413
-
SHA1
2dc42b0520eb865b06a6d327ff387ba131b73246
-
SHA256
781f1fa2b0029cd68ea7cfea8b636a9f3d721b2d7308d1ed0d5f4acf5a50a662
-
SHA512
6d3e462cc2ce0f936554317126744693ff2e6f854d6d8ec1df4a23da8c2f59405254f16aa7f89ccc63c98cdd20381e799db08789b62315063bbcb7c1092a974c
-
SSDEEP
24576:ktZ6RTdRJngL4JtRPSvbdke1XN7ItOtzu1QKHOoCkHtPBT7r0Q4SlgyfW+wU8D7P:ktZsZRwG7OdJ/jK7OxS9r0QayOpU8D
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 085ad22311f69604c309b0ea850a2413_JaffaCakes118
Files
-
085ad22311f69604c309b0ea850a2413_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.Upack Size: - Virtual size: 3.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE