Static task
static1
Behavioral task
behavioral1
Sample
5e0cdcc3b47b61528e4b6b3cfc52d86c_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5e0cdcc3b47b61528e4b6b3cfc52d86c_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5e0cdcc3b47b61528e4b6b3cfc52d86c_JaffaCakes118
-
Size
816KB
-
MD5
5e0cdcc3b47b61528e4b6b3cfc52d86c
-
SHA1
b6124ab25298af665f8a01aa56d52d7a5308d755
-
SHA256
c06e55ad247b3be6256c25e6cda84504f69121aa87ee46d29873f03138b22b06
-
SHA512
0feda7ee4da845186ebb1b577baf4bab7c21363e904480ff4b72e850bab8263361e08c58cdb0a78485c95f2fd76c974bd350fb95feeb296a7acd18ebc3dfe722
-
SSDEEP
24576:QylSlGWdq7XTurtFrJpXiA0U+mee2FOzV0y2EkWrP0:zSfdqjyRJUmee2F0gEkK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5e0cdcc3b47b61528e4b6b3cfc52d86c_JaffaCakes118
Files
-
5e0cdcc3b47b61528e4b6b3cfc52d86c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.nsp0 Size: - Virtual size: 192KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 39KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: 815KB - Virtual size: 816KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE