Static task
static1
Behavioral task
behavioral1
Sample
d05264ad09d6568c0880e617e130843f_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d05264ad09d6568c0880e617e130843f_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d05264ad09d6568c0880e617e130843f_JaffaCakes118
-
Size
525KB
-
MD5
d05264ad09d6568c0880e617e130843f
-
SHA1
0e86eb360b995e9ff665958b587262e2c2cc84de
-
SHA256
48fed9ee448b165006d8bf8db746a5c75792570361486a719a9a43557905f5a2
-
SHA512
7142bf2d48fde10ac5cb43ce73caf6714525cf42089237413c145b706ad20eb8e99464022c91a81b64ffdc1d95063d142e084252ef11419e1e58d9a96af538ff
-
SSDEEP
6144:2p8MSbpohE9q2PsXrSVew/X2+wZHeSPVep6s6BCF6GfEWfadRNH0QJTKoS:2qNp2E9/cZw/X6eSPtfS6G6dKoS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d05264ad09d6568c0880e617e130843f_JaffaCakes118
Files
-
d05264ad09d6568c0880e617e130843f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
CODE Size: 348KB - Virtual size: 348KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 175KB - Virtual size: 176KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE