Static task
static1
Behavioral task
behavioral1
Sample
d05d3798289018508960c19cde7ec05a_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d05d3798289018508960c19cde7ec05a_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d05d3798289018508960c19cde7ec05a_JaffaCakes118
-
Size
31KB
-
MD5
d05d3798289018508960c19cde7ec05a
-
SHA1
b1b1e9bcbc4db08657f6f006597cef7a6707347e
-
SHA256
19d0e5e0bd235a2356ce03c7e4125721a80b478fc7c7ab6f86ed3618fa938a3b
-
SHA512
6e4964d9a26e8457ce3f910b0aeb1a76544d0ffa4404dbc86c75eb8f6ebbd25400616854749960fc12a18063d0b1676dfc5e5917885402cc1e6412c9cc425692
-
SSDEEP
768:YpxMwd5wlFFa/ZxDRz0R7DuoFlQ0JQRuVXynDDvm8v7k5H8D:+xJd5Qa/ZxdwzPQzSaDvr45o
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d05d3798289018508960c19cde7ec05a_JaffaCakes118
Files
-
d05d3798289018508960c19cde7ec05a_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 89KB - Virtual size: 89KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 21KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ