Static task
static1
Behavioral task
behavioral1
Sample
05655bff9a337cb2757c79fb4c41186d_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
05655bff9a337cb2757c79fb4c41186d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
05655bff9a337cb2757c79fb4c41186d_JaffaCakes118
-
Size
1.3MB
-
MD5
05655bff9a337cb2757c79fb4c41186d
-
SHA1
0457c53fd2278cfa47c6f7416877f7f5e4ab6c29
-
SHA256
636640194d8f1d14e482bef9e1a81b3d9f63d396551f2a16d5c04bdecaac0b62
-
SHA512
d8a08cfcf3ad2c6d8a44d05c87455979c62a0feaabc9588032c5ff88925146db1601d77a96a4765224de4a80de9caf9900bf053ef6e328008fd8d9016c06dc19
-
SSDEEP
24576:YhvjaCSVQ3Zi0/exMUmUGO+Yw8aaHx1VEYS:YhGQJgTldHw8vHx1KYS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 05655bff9a337cb2757c79fb4c41186d_JaffaCakes118
Files
-
05655bff9a337cb2757c79fb4c41186d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 757KB - Virtual size: 757KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 16B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 46KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 97KB - Virtual size: 97KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ