Static task
static1
Behavioral task
behavioral1
Sample
605c05134fb6c86939bcc772e5be4f38_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
605c05134fb6c86939bcc772e5be4f38_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
605c05134fb6c86939bcc772e5be4f38_JaffaCakes118
-
Size
320KB
-
MD5
605c05134fb6c86939bcc772e5be4f38
-
SHA1
bfd37009470d34b42ac11a710c7cf63d092a9b76
-
SHA256
b56710ed72a2b6cba999d7cf6d67d6fda8c35f06f7cfefa16ab9a86abb62e0d2
-
SHA512
dfba8a5f4980a5471b55d5d14652d6af1b94e9fda5600f763277d30d73081d0dba1c0a83d85fec34a6a2fa573c61ab965e34f929e1dd0e5eface787ff3eecfb3
-
SSDEEP
3072:fD143an9dsF5mp3V//hcHj5sDc6fFbMfM0gECj:O89vd/huj5EFYE9ECj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 605c05134fb6c86939bcc772e5be4f38_JaffaCakes118
Files
-
605c05134fb6c86939bcc772e5be4f38_JaffaCakes118.exe windows:6 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
LoadLi Size: 4KB - Virtual size: 1830.1MB
Size: 320KB - Virtual size: 4B
���� Size: - Virtual size:
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA