Static task
static1
Behavioral task
behavioral1
Sample
85d0cef6ceab65f5dc73cc3406fa6460_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
85d0cef6ceab65f5dc73cc3406fa6460_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
85d0cef6ceab65f5dc73cc3406fa6460_JaffaCakes118
-
Size
903KB
-
MD5
85d0cef6ceab65f5dc73cc3406fa6460
-
SHA1
15eeb54d0b947833c5528396d5820e80ae5d4b68
-
SHA256
e5c1b626aa3cd402815ad17118cc0deaae908e038ef27052083e3d13044bda99
-
SHA512
5c8c2af9c0e638e9294141bd085dc20db46f75d17a523c3b0abc36cfcdf072107b84e8add8347fef6596a3baca42d3999bc7bd7b1f7a8bc8f4f1e052c3f5519a
-
SSDEEP
12288:Sexxp14LJty9gWTgzKz8MEuh12LrkXceinB0gSqLp7DpfsZY7f/W:dpo/6gIgzW8MrsQQB0gSqDsZY7fu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 85d0cef6ceab65f5dc73cc3406fa6460_JaffaCakes118
Files
-
85d0cef6ceab65f5dc73cc3406fa6460_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.packed Size: - Virtual size: 2.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RLPack Size: 903KB - Virtual size: 903KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE