Static task
static1
Behavioral task
behavioral1
Sample
253cfd9e1e3c3bc2b6b37fe16c41867e_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
253cfd9e1e3c3bc2b6b37fe16c41867e_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
253cfd9e1e3c3bc2b6b37fe16c41867e_JaffaCakes118
-
Size
5KB
-
MD5
253cfd9e1e3c3bc2b6b37fe16c41867e
-
SHA1
eff7d92ed9ceae30fb9fe10f605d8bef758469e1
-
SHA256
d013f3ed9efd13111d480efe71e67c6c2d356ee8d3933dc8e2ea4e79212fafa0
-
SHA512
04920825b5d0d0e269745300220c150e3ac40b9eda4cb550bba0205233fa1cb21947900e173010931c5093a61e90bfe637fdb58501acad0a70ce6e8438029c1f
-
SSDEEP
24:eNGS1EZuSQOgltm90GCIEYTiBTbOWTyp1LcqXNHNxv/4m20w/JOq9yqUSU5:a1EN/gTfGCpmiBHQTNHNxIm20InfVU5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 253cfd9e1e3c3bc2b6b37fe16c41867e_JaffaCakes118
Files
-
253cfd9e1e3c3bc2b6b37fe16c41867e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.code Size: 4KB - Virtual size: 137KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 156KB - Virtual size: 154KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ