Static task
static1
Behavioral task
behavioral1
Sample
05280a5b1f6eb9a2933d772558037ded_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
05280a5b1f6eb9a2933d772558037ded_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
05280a5b1f6eb9a2933d772558037ded_JaffaCakes118
-
Size
239KB
-
MD5
05280a5b1f6eb9a2933d772558037ded
-
SHA1
012780b59dddd11e587e775c9ae9a454c6cf5e56
-
SHA256
89f51809c76eace756a09b5ee09ea76659c38c3e87050a6c64bd75b632238b9b
-
SHA512
8f48fc89d38a5e966a931b5dfb03e4c376a087e8a35d334fc0d78cc23c53b72cad0baa49b1f87376739268dd7a8afd8ff8ecdd46738f4cd48eaf03909991b6c4
-
SSDEEP
6144:rqppuGRYx4H712f/SBTpzZA6rXD40b+7TJS5:rqpNtb1YIp9AI4FS5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 05280a5b1f6eb9a2933d772558037ded_JaffaCakes118
Files
-
05280a5b1f6eb9a2933d772558037ded_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
NDltoTPW Size: - Virtual size: 76KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
tJrdyPER Size: 177KB - Virtual size: 180KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE