Static task
static1
Behavioral task
behavioral1
Sample
f5fc5275d4cc54a0b80f8475c368818e_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f5fc5275d4cc54a0b80f8475c368818e_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f5fc5275d4cc54a0b80f8475c368818e_JaffaCakes118
-
Size
589KB
-
MD5
f5fc5275d4cc54a0b80f8475c368818e
-
SHA1
786331280b71e1fc8b36a71f839d5c26aa4ae29a
-
SHA256
b9168ec5bea316b67d50b3d633519b3705420250a46b2a7cae30531e6ce6ebd6
-
SHA512
76874fbcafa857ee980f100f3fcd2df8dd720adb4466aabbed3a49e4a751bb793bfb35136a74a8c54e39dd4ce6e38d93768966f79b5424594f3878fafdd43eac
-
SSDEEP
12288:EeK9iTYJC1p9bNvReAG5kKDmpDknRh9NtTird:k9ioCzVNJe7mwnpTEd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f5fc5275d4cc54a0b80f8475c368818e_JaffaCakes118
Files
-
f5fc5275d4cc54a0b80f8475c368818e_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: - Virtual size: 456KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 386KB - Virtual size: 396KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 199KB - Virtual size: 200KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE