Static task
static1
Behavioral task
behavioral1
Sample
f5191bf0b5d1309d07453ff6ebd9f092_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f5191bf0b5d1309d07453ff6ebd9f092_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f5191bf0b5d1309d07453ff6ebd9f092_JaffaCakes118
-
Size
256KB
-
MD5
f5191bf0b5d1309d07453ff6ebd9f092
-
SHA1
335a945ebc675d3b18bf7f5d1d191feb93b08761
-
SHA256
448fc2c75df6b9b624c260ac5e93c67803f48ea88487687f677436ef5e1bca41
-
SHA512
4f5e17a043c2917590500f3382b8a716ef1e1c8fba0de23cf06289d4176b29740b93699515856b61d2cb38b4f4cde2e3f7e0f2397ae694b67eaca5f8fa925a80
-
SSDEEP
6144:h6qlRsqvvAz4d3WkXoWiyjtYlWXGCaQBamRWS/C:h6Afv04BDXOy6E1aQDRWyC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f5191bf0b5d1309d07453ff6ebd9f092_JaffaCakes118
Files
-
f5191bf0b5d1309d07453ff6ebd9f092_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 459KB - Virtual size: 460KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 312B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE