Static task
static1
Behavioral task
behavioral1
Sample
5dc19e9db4f626c2a4549ecb4eb43fae_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
5dc19e9db4f626c2a4549ecb4eb43fae_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5dc19e9db4f626c2a4549ecb4eb43fae_JaffaCakes118
-
Size
410KB
-
MD5
5dc19e9db4f626c2a4549ecb4eb43fae
-
SHA1
b679c7b83a24fe7d32ab7f9584cdb6bb02516dac
-
SHA256
eb2fc7223f6b9eb161ea1f2a4e4155cb73f7cb0b961aacfcefa0be32e8363276
-
SHA512
740079bab1c79d0a51e8dcfe8cdcf5cd6fe4a4a93690701d2963886a10fe63b4fee63802cada14150bcd42f2005fbf19bf9fdf9236550d381e5497679fd4e3fe
-
SSDEEP
12288:0wWB5jKOzsD81QfoYIef8sI90I7bAEmpmXD:0zsANeHU0IPAEmwT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5dc19e9db4f626c2a4549ecb4eb43fae_JaffaCakes118
Files
-
5dc19e9db4f626c2a4549ecb4eb43fae_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.nsp0 Size: - Virtual size: 676KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 408KB - Virtual size: 412KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE