Static task
static1
Behavioral task
behavioral1
Sample
05aea1ee397a450dd26ef0d6098209f7_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
05aea1ee397a450dd26ef0d6098209f7_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
05aea1ee397a450dd26ef0d6098209f7_JaffaCakes118
-
Size
1.6MB
-
MD5
05aea1ee397a450dd26ef0d6098209f7
-
SHA1
8054cb0cc8511789259661e1de76ae88559a531c
-
SHA256
b4e86b08a89e9627fc848ee07ce9173702e74bdeedb23b38e6802e87bf782e28
-
SHA512
214879d5512575002b6df9c4e5d48feee446d235fa1d4f5e4377e7e152cc70b175adb3df6f7673901b7338e4214c40f64ad4374ced08e81218bd13b45fd7f163
-
SSDEEP
49152:aJU2x9l3CaOwxubqrIlaqirrh0gCByNPJaqiY:auIj3qwcDaqix0gkyZJaqi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 05aea1ee397a450dd26ef0d6098209f7_JaffaCakes118
Files
-
05aea1ee397a450dd26ef0d6098209f7_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
A Size: 208KB - Virtual size: 548KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
B Size: 7KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
C Size: 4KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
D Size: 512B - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 56KB - Virtual size: 312KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE