Static task
static1
Behavioral task
behavioral1
Sample
85f173867b3853cde701c7bd3ea11ca5_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
85f173867b3853cde701c7bd3ea11ca5_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
85f173867b3853cde701c7bd3ea11ca5_JaffaCakes118
-
Size
236KB
-
MD5
85f173867b3853cde701c7bd3ea11ca5
-
SHA1
861339fcc074c7c3e85856848bb835d1fc91bd2c
-
SHA256
859d3d9319cfaaea195f633b36bcca73a6a336c19d431ab699ade2aba33a6eb2
-
SHA512
84cb90d75a668d11ff3d53a2677fa819dc3671cda90a2c2133befff5cbc6db9845d6156aa03d48946e8329415132b1c37382adca3677ba3ee824f402795e6b97
-
SSDEEP
3072:2J1233xNtL99wj5U9TOg1VXZvqXmDkRyIsDz7/FEEuiK+7REVqntnl+VgbOOtqDy:2uxjG9Mq6DgsySRbaI/QYod6TBW0PR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 85f173867b3853cde701c7bd3ea11ca5_JaffaCakes118
Files
-
85f173867b3853cde701c7bd3ea11ca5_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 172KB - Virtual size: 168KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 40KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE