Static task
static1
Behavioral task
behavioral1
Sample
85dea65c7d0df17c763c1f28be434aa6_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
85dea65c7d0df17c763c1f28be434aa6_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
85dea65c7d0df17c763c1f28be434aa6_JaffaCakes118
-
Size
1.2MB
-
MD5
85dea65c7d0df17c763c1f28be434aa6
-
SHA1
740cd0692cc62e8482363371aac0804755b6483f
-
SHA256
b0721d8bb206c6d3984a0c8a00450205b1f357eb3121443777ad704eb76aa37b
-
SHA512
efa269d8750e400bd8c725fef32e1c9fb0204a8cc3e9129b20f4e7ef8db0d1ddc203caad010048fbe8a10fb020e874948144dd4dd8d6310cbc299faf005a00ce
-
SSDEEP
24576:O6feAhBBMtiMELHRQnGechgAbncwKBnbqdtU5v4+0uI0H0+6ZnAfnJ:/fpBFMeRQHAnnmKqg6aAfnJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 85dea65c7d0df17c763c1f28be434aa6_JaffaCakes118
Files
-
85dea65c7d0df17c763c1f28be434aa6_JaffaCakes118.exe windows:4 windows x86 arch:x86
effddb68b730791fabc8a8a8e52dc0fe
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
VirtualProtect
ExitThread
Sections
CODE Size: 576KB - Virtual size: 575KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 16B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 636KB - Virtual size: 636KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ