Static task
static1
Behavioral task
behavioral1
Sample
f5b025d202744b4060704a318ac8dcf8_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
f5b025d202744b4060704a318ac8dcf8_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f5b025d202744b4060704a318ac8dcf8_JaffaCakes118
-
Size
5KB
-
MD5
f5b025d202744b4060704a318ac8dcf8
-
SHA1
73fa8c35fbecc3a5cbe9d0a50d23f964d6506e0c
-
SHA256
ff9bf71bffb5176a7d83930643b8c202018f70e9030cd098e13915925f1b90f1
-
SHA512
8a2467081b746949471aad1e5b1873f266e9ec65c38a74a296b7d6db643a09c8e3f72f8bf8816997292bc28da14bfb86b3215b171fb0414b888c08704e8f21dc
-
SSDEEP
96:3sLAvCIyY+T8ScNGpnwfk45PvRW+euTDzPTX7jK/ThtgRXKz6PymKNwM0/3Gu1mz:cNZY+INGesgPA+Dq/Thm9m6PymYwMg3q
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f5b025d202744b4060704a318ac8dcf8_JaffaCakes118
Files
-
f5b025d202744b4060704a318ac8dcf8_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.Upack Size: 363B - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE