Static task
static1
Behavioral task
behavioral1
Sample
5e4be05b871da99e204bd83e7656147d_JaffaCakes118.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
5e4be05b871da99e204bd83e7656147d_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
5e4be05b871da99e204bd83e7656147d_JaffaCakes118
-
Size
89KB
-
MD5
5e4be05b871da99e204bd83e7656147d
-
SHA1
6e7a577b938aa7f3f5417de0b1adb244fc6b02a4
-
SHA256
f2f7c282fa77ec0d7624641af761d0d7abb1412a62bcad0b9f8112a7c9a4f0b6
-
SHA512
27c783e33b97bd93ed810808f5a4bda9e86c8b403d95ed7c908f9dea7f28bac85f0b7170598aed07724d60e6ee742df294abd7a473d938cb3a6c5aa283f2706a
-
SSDEEP
768:uib2rEfREP6/iWZv7EkOBZesz+nC59roLwka+biMHNpRshWaHQD1XdIscy6W7Q5u:uSGEJEPod7Hyes159170N0hEfk59CF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5e4be05b871da99e204bd83e7656147d_JaffaCakes118
Files
-
5e4be05b871da99e204bd83e7656147d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
�ext Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ