Static task
static1
Behavioral task
behavioral1
Sample
f5d836223c6f4850c383afa6f8db7253_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f5d836223c6f4850c383afa6f8db7253_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f5d836223c6f4850c383afa6f8db7253_JaffaCakes118
-
Size
18KB
-
MD5
f5d836223c6f4850c383afa6f8db7253
-
SHA1
dbe2a60c467de38c5b52ec3a92c44304619105d0
-
SHA256
e4b9cb2d03cdedef1f90f91fbcdfff6a79f99c9b10706381e4d209780a2a1102
-
SHA512
a6a43a93b7a720d158c78b7ad1417f82af9d5477435979056567ef2469b1bf0ec683043fe963218ab3319a10e3a16bf7d48b0818f684c2762a3b6231a6e5c889
-
SSDEEP
384:bQ00crMPJYnnFMCKe9L628JaPyYXn8b39z9vR:000cAP6nKkL63kE9z9v
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f5d836223c6f4850c383afa6f8db7253_JaffaCakes118
Files
-
f5d836223c6f4850c383afa6f8db7253_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
code Size: - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE