Static task
static1
Behavioral task
behavioral1
Sample
f5120528dd11044b43e5200f496fc039_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f5120528dd11044b43e5200f496fc039_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f5120528dd11044b43e5200f496fc039_JaffaCakes118
-
Size
30KB
-
MD5
f5120528dd11044b43e5200f496fc039
-
SHA1
eb8fe358e858f4d02d97d71f35352c6f75d7a751
-
SHA256
6d6decbeefd99d1e88dcb99085bc0222df24d4a6b58ee2032f53756a6e858433
-
SHA512
7203c6731946c41c716359fb6bf9dc46350d3b4c50230079bff11c004cab3f0aca71dd707dfcf0dbe9b1d4b28c63bc6c03f1129ec90aa90f6b468fc4c628f097
-
SSDEEP
768:nAXEn5Wuz1u6JyU+TuA0lrwANMEyjKuXRE2eU9IJU/uItTIAv:nA25dwSzUANK+uXqIIJC8q
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f5120528dd11044b43e5200f496fc039_JaffaCakes118
Files
-
f5120528dd11044b43e5200f496fc039_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.PEX Size: 512B - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.PEX Size: 29KB - Virtual size: 42KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE