Static task
static1
Behavioral task
behavioral1
Sample
485ca23f0d8cb253dafc99e0b60c72d2_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
485ca23f0d8cb253dafc99e0b60c72d2_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
485ca23f0d8cb253dafc99e0b60c72d2_JaffaCakes118
-
Size
136KB
-
MD5
485ca23f0d8cb253dafc99e0b60c72d2
-
SHA1
8ee9ed3800ee81bb0d9f485b1ffa840207f83c33
-
SHA256
107ffc8e6a34050259e875ac4ef05d7e31f17bbf0b5b0d58dce2d5399353a58a
-
SHA512
14052de1e24147d4d510e47311c0ce2f2cd834e884609f844312052e92e7d22f4d698edd2d0dcb04dd88b6694f54c84038c29538275f7b283b2b8f290d180fd8
-
SSDEEP
3072:QtVcgz4HE4gu4+4C8EEIbXys/qCrXEV7ixHsMOwoVWsOwk7QuK:RhH+u+cdrUVOTOtVzl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 485ca23f0d8cb253dafc99e0b60c72d2_JaffaCakes118
Files
-
485ca23f0d8cb253dafc99e0b60c72d2_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
bad0 Size: - Virtual size: 232KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
bad1 Size: 132KB - Virtual size: 136KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
bad2 Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
bad0 Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ