Static task
static1
Behavioral task
behavioral1
Sample
f5cbdc441d1644743200631ee393313c_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f5cbdc441d1644743200631ee393313c_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f5cbdc441d1644743200631ee393313c_JaffaCakes118
-
Size
40KB
-
MD5
f5cbdc441d1644743200631ee393313c
-
SHA1
f29ae62e25cba25f86e2e6f7273534494ffb1bb9
-
SHA256
d13ae2911dedb56557b3e9e7a88023dfc64dbd367de322b65c60ec9e972bdb24
-
SHA512
7168a604cfabf63b478da5abe2f9dbb592e3b5fab809f6bc609f4add65c72d6da827c69034c972370e1d8bc235af823105ba2131c7c954d42f5184cf9ebb662f
-
SSDEEP
768:WI0hQTtBRhL1PapjP6PieF/spSJi2O5wsVWGFrZun3I1bVDnw/QcsxGha5Sq:WsTj9apbeSpSJijbfCI1bVDnw/XFr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f5cbdc441d1644743200631ee393313c_JaffaCakes118
Files
-
f5cbdc441d1644743200631ee393313c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 29KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 3KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.PEPack Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.xpr01 Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE