Static task
static1
Behavioral task
behavioral1
Sample
5f5fedb71b12f1cfb4c2b175a7504024_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
5f5fedb71b12f1cfb4c2b175a7504024_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
5f5fedb71b12f1cfb4c2b175a7504024_JaffaCakes118
-
Size
674KB
-
MD5
5f5fedb71b12f1cfb4c2b175a7504024
-
SHA1
3e8bc5c6662af152b2ad7a9a85285f62bd8d1062
-
SHA256
cdc6b63d19637a4b99a7e1843b841473b6d42d6b2ce211a2e2b5430b3c11217f
-
SHA512
d31b0667dec211fb0e37fe70b16ff9c42f75385b5dbd981c6aa3bd2c52e064b5e77786078fd0d51fe2586306f5d28e572ec6c2c116df6117729ead9914eacedc
-
SSDEEP
6144:Zq8tLCzEk3lG7Nu+Zsh2T7i/SYMwqX6d1uzP4fTbBuYsycx6Fvtb45bQYk8qUXfY:xtklG8Th4+MRXa1IKfMYhI6Tbsx9fGt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5f5fedb71b12f1cfb4c2b175a7504024_JaffaCakes118
Files
-
5f5fedb71b12f1cfb4c2b175a7504024_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 672KB - Virtual size: 671KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ