Static task
static1
Behavioral task
behavioral1
Sample
0005e8a3b60a21dfa50a6eb3d705a9c4_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
0005e8a3b60a21dfa50a6eb3d705a9c4_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
0005e8a3b60a21dfa50a6eb3d705a9c4_JaffaCakes118
-
Size
103KB
-
MD5
0005e8a3b60a21dfa50a6eb3d705a9c4
-
SHA1
1e30d41c4a4363a5b2f0efa26b2a829a4696e9f0
-
SHA256
65d83b5f243652829affe62981162aaf7d27307c7d3eff02007a8415edb26203
-
SHA512
aeae280a285c66519575ec3c8cb314e8b40915ae192f996dd5399193f2fe9af424a639ef1fbf1ffc92e269567ffc60acde7f413769a4d34f51358d65dfb8dca4
-
SSDEEP
1536:5odQBOxEY/jj5F3XaNJNRriD0k9qFebS67BEHXz/Zd4f9lpfqeDgfFg9JzNbai1e:5t8f/3YJNRmt9T7BEHDBd4BSfFmFw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0005e8a3b60a21dfa50a6eb3d705a9c4_JaffaCakes118
Files
-
0005e8a3b60a21dfa50a6eb3d705a9c4_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 1KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE