Static task
static1
Behavioral task
behavioral1
Sample
05266577181b3476b5c721450fab9444_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
05266577181b3476b5c721450fab9444_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
05266577181b3476b5c721450fab9444_JaffaCakes118
-
Size
9KB
-
MD5
05266577181b3476b5c721450fab9444
-
SHA1
b5b985cf622566b78fc77b5896153200ac5ea7d1
-
SHA256
7120c9604cc02f18d720e1a9398633bf73619928bbcff2b0cb68fb7018b272e8
-
SHA512
1c9e04eb928846c170961042f25b6f5cec5556314d31983fcc50d3352cfba09a13f71adc558fd90237cbe6e8f6815e1a977864fb4f4029707f09fd4af538ca55
-
SSDEEP
96:lmbWm+SJFKAsYdTdyTX8gkREkAhzdB8tmnxyQU3MXmk10qZ6m6VwB:llm+S+9YdTi8U1hpFkhY0qn66
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 05266577181b3476b5c721450fab9444_JaffaCakes118
Files
-
05266577181b3476b5c721450fab9444_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 32KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data1 Size: 7KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE