Static task
static1
Behavioral task
behavioral1
Sample
f5d9e289441da5ead2ecb619fd9613df_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f5d9e289441da5ead2ecb619fd9613df_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
f5d9e289441da5ead2ecb619fd9613df_JaffaCakes118
-
Size
4.3MB
-
MD5
f5d9e289441da5ead2ecb619fd9613df
-
SHA1
1fb969172eaca0a48a5f68cdd19fb1b2fe588ca1
-
SHA256
c9f05cbccb0a17ad361d8645ea6409c0a94ea15cabc648de6165dc5670d9e337
-
SHA512
d3c5bdc70b8037c4534a6b360fac5b1e786719b3f3f8c8578476c69b5f77fe5c64cfe8c6fe714c6f9afd21e1393045878fd0c8cd49f272b71e4ceb0d68ba1f6b
-
SSDEEP
98304:TWstGQzk2gtkJk2poyAM5rWnv+2K3gi1EULF5K3qvfZtgce0epwIImnMBh8Lq+6d:ThZngtk1pB5rWv+RJ1TFw3i7Xe0uwRmg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f5d9e289441da5ead2ecb619fd9613df_JaffaCakes118
Files
-
f5d9e289441da5ead2ecb619fd9613df_JaffaCakes118.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 4.3MB - Virtual size: 4.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ