Static task
static1
Behavioral task
behavioral1
Sample
b05a88f2b5101692192d35b034777155_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
b05a88f2b5101692192d35b034777155_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b05a88f2b5101692192d35b034777155_JaffaCakes118
-
Size
732KB
-
MD5
b05a88f2b5101692192d35b034777155
-
SHA1
fb4ca9ee89f4b7481a75ba978544e6cbdb09341d
-
SHA256
66a2e7b2756f5c58818ca7462c033cfa486797d1dcb3330ecfb0fe7c998637d6
-
SHA512
109633c48162f35aed595ea39488dfef5b75f981ddf6e04e9ecdc241b0935e75274e4f6a77a9992a256f80c85c73aee2d8816cab9eaf7c3d615db87048da99b6
-
SSDEEP
12288:HgNUHNHguMuHnp2S7zXSyzcfvKrSTw4XrpIKFyPezEWbLz9m6Si5ljcwgRmwVXGd:HWINAuMuHn17zXRzcnKeZXdIKFyPezEs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b05a88f2b5101692192d35b034777155_JaffaCakes118
Files
-
b05a88f2b5101692192d35b034777155_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 1KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 22KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.coze Size: 548KB - Virtual size: 552KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.config Size: 124B - Virtual size: 124B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE