Static task
static1
Behavioral task
behavioral1
Sample
0509698a581b7ff51dfa47de8cf41558_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0509698a581b7ff51dfa47de8cf41558_JaffaCakes118.exe
Resource
win10v2004-20240426-en
General
-
Target
0509698a581b7ff51dfa47de8cf41558_JaffaCakes118
-
Size
83KB
-
MD5
0509698a581b7ff51dfa47de8cf41558
-
SHA1
5fbbecf6bcac32520f1e52e19f6896af2780d6ab
-
SHA256
3d47699f3896df659336c3fa3907bec4397c2ebb470eb17ebc3ab2085eda92bc
-
SHA512
a780f321cc18490846813616d8a6ec199049cc80d4121169265f3277e0ba6b4834b6c7f71a774873afb9d59ed718283cc32f6a2e638c003db075ab357757745c
-
SSDEEP
1536:ROkXvR85Neh9tt7aSND9FH2WqOq3qqHrIurANJMK0lc6/uoLlTQjGSvqtr1:0cvR85UtbDWWqOq1HrIurANe/uoLlTQC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0509698a581b7ff51dfa47de8cf41558_JaffaCakes118
Files
-
0509698a581b7ff51dfa47de8cf41558_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 78KB - Virtual size: 77KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ