Static task
static1
Behavioral task
behavioral1
Sample
5de44075d204da78950ffb968156be73_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5de44075d204da78950ffb968156be73_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5de44075d204da78950ffb968156be73_JaffaCakes118
-
Size
5.2MB
-
MD5
5de44075d204da78950ffb968156be73
-
SHA1
93d1167f9a36589d4c26284b2d6e431c924f9222
-
SHA256
2111207c78f38a6a4a56bd1db21bf6b97f9dec9f9f68eb3e914501e9bbcae828
-
SHA512
e3d1bb3baa0da8a8d1cd2c4a1e86cda0644e922db082fd0ffe22a27942cf051b8d8dc59ddb0f900d129bfb625a02edee6283454d9704262dbb464154557208f3
-
SSDEEP
98304:rn058aF19oMtUIO+g1Vdg+S5ZQzLGeZz9/hPQUvYOtVqFMIWGPNmCy89/kgroloL:jdy7oMpILJS5SzaelxhPIPWum2rv0bc9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5de44075d204da78950ffb968156be73_JaffaCakes118
Files
-
5de44075d204da78950ffb968156be73_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
xicheng! Size: 1KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5.2MB - Virtual size: 5.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE