Static task
static1
Behavioral task
behavioral1
Sample
f5919e5db4f5bd72bf3b177dc83cfcc9_JaffaCakes118.exe
Resource
win7-20240319-en
Behavioral task
behavioral2
Sample
f5919e5db4f5bd72bf3b177dc83cfcc9_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f5919e5db4f5bd72bf3b177dc83cfcc9_JaffaCakes118
-
Size
1.1MB
-
MD5
f5919e5db4f5bd72bf3b177dc83cfcc9
-
SHA1
756d1154dfa897ebe37132fd7907950949f829df
-
SHA256
e4766d2abdd84a8391ce07c055da752650197b0130fe5ea17c9e266fe174adc4
-
SHA512
962eaf6d6a889a2a711ab1d807752369b812d62d645c91993a2f7a9e91aa7a2a949991ca578d69e586996f9f3125b8354661bdb9640f1570f300aa1ea5fc254c
-
SSDEEP
24576:1I39d/zbWl2fFSPhiS3gXGrsrMrp4C0Cqe1h7R5mwJZ80UTW+Xy7P0Z:16d/zbHEh73gXGrsep/NqmLWPTW2y7sZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f5919e5db4f5bd72bf3b177dc83cfcc9_JaffaCakes118
Files
-
f5919e5db4f5bd72bf3b177dc83cfcc9_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 36KB - Virtual size: 35KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 1024B - Virtual size: 584B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ