Static task
static1
Behavioral task
behavioral1
Sample
5f51ca0376fe25d7cde71a47a55e54b0_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
5f51ca0376fe25d7cde71a47a55e54b0_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
5f51ca0376fe25d7cde71a47a55e54b0_JaffaCakes118
-
Size
896KB
-
MD5
5f51ca0376fe25d7cde71a47a55e54b0
-
SHA1
9448dd108896fc57c5ce2d65ed52632fa6daa798
-
SHA256
21b6beb1b332d8e2d7633da23fc9aaa00fcdf80609e75f141a1ee3e2da34d407
-
SHA512
082058f80ee9bf1a3df8a24cdb958a8c261331cbe1cec33a130256a2f0254a974dd4a182bef28bb5b96e9c7f61f62506e917e7a9b501c702851b1ba45c39494f
-
SSDEEP
12288:iAYVxiIBbKvQSYmEcHCh/ZMcJP/xP0hnB:i7+IB+vV1HCh/rP/x+nB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5f51ca0376fe25d7cde71a47a55e54b0_JaffaCakes118
Files
-
5f51ca0376fe25d7cde71a47a55e54b0_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 872KB - Virtual size: 870KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ