Static task
static1
Behavioral task
behavioral1
Sample
605ca7ff3e550b4170d3ebf03d9bccc9_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
605ca7ff3e550b4170d3ebf03d9bccc9_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
605ca7ff3e550b4170d3ebf03d9bccc9_JaffaCakes118
-
Size
332KB
-
MD5
605ca7ff3e550b4170d3ebf03d9bccc9
-
SHA1
7f4020ff15b7be7ed69f70df6af78afd1c2b6e36
-
SHA256
1c2eefa754c146d53b67a892a45cfce0e2c1f0392a7b7c1953333817261243bd
-
SHA512
05768a20646d98624d99688a1e693717a37b64a391e6216827b22717794d8e98d34a28d49a91bcb9b6e682e752ef0529c1e6eed8115daf9444727bb45353c78f
-
SSDEEP
6144:XC7dUSzF2idZecnl20lHRxp3gEaQbo6cpoXPyva4F0xYEr:SB1xF3Z4mxxV1U6c0PtfT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 605ca7ff3e550b4170d3ebf03d9bccc9_JaffaCakes118
Files
-
605ca7ff3e550b4170d3ebf03d9bccc9_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 18KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 312KB - Virtual size: 316KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE