Static task
static1
Behavioral task
behavioral1
Sample
5de7173857f4824d857d58aa6b3d0823_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5de7173857f4824d857d58aa6b3d0823_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5de7173857f4824d857d58aa6b3d0823_JaffaCakes118
-
Size
111KB
-
MD5
5de7173857f4824d857d58aa6b3d0823
-
SHA1
a7da98d6522c4615c2588981131f526dc7740b4d
-
SHA256
c8358fec03b820d467fc4c493e0d8ed3d93319a466b21a0227442c1806f8dfff
-
SHA512
24beb47a1395770dbb0367900e93f0b727236025eb5447a9ca3a96d940e2b35ef4f8c00f2301d6760b2b412c502cd60b3cce764a9e2dfbeb8df33fd3f6a4af1c
-
SSDEEP
3072:J6oejTJFBcEgi2D8/P8sCtQRHOLkD3XxlQLf:VaThJ2iPPCyRHWCnPQLf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5de7173857f4824d857d58aa6b3d0823_JaffaCakes118
Files
-
5de7173857f4824d857d58aa6b3d0823_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: - Virtual size: 88KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 106KB - Virtual size: 108KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE