Static task
static1
Behavioral task
behavioral1
Sample
a05d3359dff04c20753a45162dbdb49d_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a05d3359dff04c20753a45162dbdb49d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a05d3359dff04c20753a45162dbdb49d_JaffaCakes118
-
Size
28KB
-
MD5
a05d3359dff04c20753a45162dbdb49d
-
SHA1
88080467c3cf0ff10cd0af45d8367eca1c2aa239
-
SHA256
35193824bc04e0f56b730f6269e15518c48ea35862488d77c78690cacf1a3ff0
-
SHA512
20787067766b79a51872e27a5d4ad626ad6cec1abe673c2b6aa5777410c9f312bab1702c1df504b1c12cc1d085bcb31645dedac873953403219f962ea0f035ce
-
SSDEEP
384:GRJcfhXr14FMv2npKiUStnhXROLFy7Q/YYqQbQH4i6lDDUKqnNmSLQPaFA7LIVgp:cJ4hyFc2gipthXR+ASQYvfUTrU5fp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a05d3359dff04c20753a45162dbdb49d_JaffaCakes118
Files
-
a05d3359dff04c20753a45162dbdb49d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
MEW Size: - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�uۊ�� Size: 24KB - Virtual size: 84KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.shield Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE