Static task
static1
Behavioral task
behavioral1
Sample
085a8e095a081137f498bbca85dc5683_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
085a8e095a081137f498bbca85dc5683_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
085a8e095a081137f498bbca85dc5683_JaffaCakes118
-
Size
1.0MB
-
MD5
085a8e095a081137f498bbca85dc5683
-
SHA1
fb6f4d8a50b367242aafeae015669081e70ffef5
-
SHA256
0b18c9934d280d3241116e7fcd079fa9c0b9dc1fc20a0895598c4475d8b37839
-
SHA512
898da7ce15afd60fc34faa75a9427de060ead56a88e16d56aeb50e9cdf377a92c042b5db0eff11ee05b8eaabb13b75cc04260c6b679fa023d66837f39a54741e
-
SSDEEP
24576:NxitrbxHNJhlaCobml4j8bXhr7hQmhKIBZgGNFYjgXVJPvsWw9PPl:q5HNtaClls8bXBe6vBZNPBVJPvsJ9PPl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 085a8e095a081137f498bbca85dc5683_JaffaCakes118
Files
-
085a8e095a081137f498bbca85dc5683_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
WinLicen Size: 1007KB - Virtual size: 1008KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE