Static task
static1
Behavioral task
behavioral1
Sample
485fd5a389ea2c39a41e119e1731e329_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
485fd5a389ea2c39a41e119e1731e329_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
485fd5a389ea2c39a41e119e1731e329_JaffaCakes118
-
Size
57KB
-
MD5
485fd5a389ea2c39a41e119e1731e329
-
SHA1
3472e932405f5358e2d3fbfff3d6df34e1eff1b6
-
SHA256
7fa2b1cd5817591c860d2d2df02c51c89f6d73e7996caf9509b5cf0ee9ffc548
-
SHA512
eb3348df32d2ec825fa092e6e5c2f2aceca29477c89f73c7e56d80526ad9f69c8ad197f9fd0cf743d760acd4af200166237f413f95e48b375b0289d0db43de7f
-
SSDEEP
1536:MysuehEZVvzDxAYA+6QfHEs7v8JHE6xbGAuNldg:MjqZlzySftu/FGnNli
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 485fd5a389ea2c39a41e119e1731e329_JaffaCakes118
Files
-
485fd5a389ea2c39a41e119e1731e329_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.y0da Size: 512B - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.y0da Size: 8KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE