Static task
static1
Behavioral task
behavioral1
Sample
059cab0948b16bfbce47bc7d2b13797f_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
059cab0948b16bfbce47bc7d2b13797f_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
059cab0948b16bfbce47bc7d2b13797f_JaffaCakes118
-
Size
376KB
-
MD5
059cab0948b16bfbce47bc7d2b13797f
-
SHA1
ce2df0c74cddb9447e0f68c0da27157be2eb891f
-
SHA256
b66fb611109f87f1fc1460e73e8ef691aaca3e68aab18a125cbf3ad256a9ce73
-
SHA512
3633b129d75ad44924e3ba7bf4061d4314e92705efbad98735849a4605e434f59e5b166941e8114594cad43b30604aa18249a370f135a8bc0e8d4ecc8e7c3122
-
SSDEEP
6144:7mc8IQF/9WH/zLDOXdrr2emr13V8UplrK8Z59dx0qNkSeh0ahYoWdGwDbhqTw9t0:7Ct9WqdrwV8B8ZNJkBh0ZrDDU2+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 059cab0948b16bfbce47bc7d2b13797f_JaffaCakes118
Files
-
059cab0948b16bfbce47bc7d2b13797f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.PDX Size: - Virtual size: 532KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.PDX Size: 372KB - Virtual size: 376KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE