Static task
static1
Behavioral task
behavioral1
Sample
f5cf44b97114d2888bd388f90aa1adc0_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f5cf44b97114d2888bd388f90aa1adc0_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f5cf44b97114d2888bd388f90aa1adc0_JaffaCakes118
-
Size
1.4MB
-
MD5
f5cf44b97114d2888bd388f90aa1adc0
-
SHA1
5b77afd430f27794154681f36167cdf5efc365ff
-
SHA256
6bc9a9d8389869f6ae4586f36d26b4e46ad2d6f04fd9bc6420c68db0420ebe08
-
SHA512
03125b945200b3ad38ad662fc5975ef3ccb75b0b9585d30dad453f8f63bb34ae9e82734b33c41a8e987130a33fcb2bda89132ecef9da58e01e92e0b92eeb7fcc
-
SSDEEP
24576:Bf7E6gR5hdOLN9qDe83IG6LknckneHfiwdLSFFdlj5pnKhVRB7KWUFIOzERUFyHN:ZE6GhdA9Ge8396LknPneHfPduFFdlTnG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f5cf44b97114d2888bd388f90aa1adc0_JaffaCakes118
Files
-
f5cf44b97114d2888bd388f90aa1adc0_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 23KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 110KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ndata Size: - Virtual size: 36KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 41KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ