Static task
static1
Behavioral task
behavioral1
Sample
285b5ccb7f8f6759244ef14141efca48_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
285b5ccb7f8f6759244ef14141efca48_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
285b5ccb7f8f6759244ef14141efca48_JaffaCakes118
-
Size
180KB
-
MD5
285b5ccb7f8f6759244ef14141efca48
-
SHA1
3a9fdb7cb900e716c3cfbb34fb0f4df271d33d55
-
SHA256
6b474f593080775033c3221b2277aa19a85982a88607db526f209ae1ca260342
-
SHA512
96c949d3b31795eecf13eda750899c826b1f81a42450de4f2840f63a830998beec22ab6a5b1ee4ac490d43c12e730ca810af8d540771e1c9d5702853122486a9
-
SSDEEP
3072:bUTcamuBaa58lRRb/X3/pJcRAqw0KxqKkN1JmAxXAJo0x5mVN7VnHBx9Tb+:bUl78trX3efwDxqT4A9Aa0xYrVHBx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 285b5ccb7f8f6759244ef14141efca48_JaffaCakes118
Files
-
285b5ccb7f8f6759244ef14141efca48_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: - Virtual size: 540KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 179KB - Virtual size: 180KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE