Static task
static1
Behavioral task
behavioral1
Sample
05215bbf0d5e24827a24a7f7607813e0_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
05215bbf0d5e24827a24a7f7607813e0_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
05215bbf0d5e24827a24a7f7607813e0_JaffaCakes118
-
Size
416KB
-
MD5
05215bbf0d5e24827a24a7f7607813e0
-
SHA1
b85d7b96ad1f00dd9de31c836be30dd493536360
-
SHA256
a74a168ef332c90d3632fa5950f81a8ed314f336dc06a55b7978136af0fccdab
-
SHA512
10d20893f113c05775e3508ef35aaf7dc520b544289c4db86e60c946ac0567bd7b61fbffb0dcf5f39c117a5f4f8437d8721e7985436a7a21e46b09f032739d3a
-
SSDEEP
1536:thRbW2kAXyObWlAaiJvOFvGjjogHynF2Os6:tD4AXy1AaI2MjjoUynzs6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 05215bbf0d5e24827a24a7f7607813e0_JaffaCakes118
Files
-
05215bbf0d5e24827a24a7f7607813e0_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.geah2 Size: 33KB - Virtual size: 33KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.1h55 Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.h863b Size: 346KB - Virtual size: 346KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.82ghg Size: 796B - Virtual size: 796B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ