Static task
static1
Behavioral task
behavioral1
Sample
5dc0f493b2eae8b86a9168d5269f8087_JaffaCakes118.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
5dc0f493b2eae8b86a9168d5269f8087_JaffaCakes118.exe
Resource
win10v2004-20240426-en
General
-
Target
5dc0f493b2eae8b86a9168d5269f8087_JaffaCakes118
-
Size
1.7MB
-
MD5
5dc0f493b2eae8b86a9168d5269f8087
-
SHA1
b69e1c4571d303f3d26782d647ed42e868f57859
-
SHA256
d0ee969dc5fb1cfa809e66fe2d0fb3d2ce5d9f2a258272d24675c279b285460b
-
SHA512
a5626e39924a113c04cd510957e6f91eb9d95acfc3026fd94447b689b5922bca8c227a1ef541521c80faec64f783043fb5bcf3060148fbb7271f4bb720a9fadf
-
SSDEEP
24576:8sVo64ePI5181pSw6Gc+IOskmcPpCxwyQuzxgaXC+sv23DBLLNq/FGW:8iooP68rSw6GGOVB92lL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5dc0f493b2eae8b86a9168d5269f8087_JaffaCakes118
Files
-
5dc0f493b2eae8b86a9168d5269f8087_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.4MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 263KB - Virtual size: 262KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ