Static task
static1
Behavioral task
behavioral1
Sample
f5d66f882de32798b1fb5cd1630bf98b_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f5d66f882de32798b1fb5cd1630bf98b_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
f5d66f882de32798b1fb5cd1630bf98b_JaffaCakes118
-
Size
11KB
-
MD5
f5d66f882de32798b1fb5cd1630bf98b
-
SHA1
feebc2a269bb5788dcff49f547e52ea83e4e84c9
-
SHA256
92830b03d2201548bd4112c4e367058dfdc8fd35600ebc66823a474c666b85f0
-
SHA512
0abe3c4e18cae4ca7e0e826ad86db9cc155a8da7444a3dcedd277153384c10dc66cdf84e0bb67950502c3f90d9d34207c530e59c0385221c45e92d742edfdab7
-
SSDEEP
192:nxGfeHtKB16/dEpC5b6lq8O8vhLNJOR3lcrsGfzCLmS+Q:4f4i16upC5mx53J23eALLCQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f5d66f882de32798b1fb5cd1630bf98b_JaffaCakes118
Files
-
f5d66f882de32798b1fb5cd1630bf98b_JaffaCakes118.exe .js windows:4 windows x86 arch:x86 polyglot
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 530B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE