Static task
static1
Behavioral task
behavioral1
Sample
5e0daf37c0bb795c9b6ffc7f684e18e8_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
5e0daf37c0bb795c9b6ffc7f684e18e8_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5e0daf37c0bb795c9b6ffc7f684e18e8_JaffaCakes118
-
Size
640KB
-
MD5
5e0daf37c0bb795c9b6ffc7f684e18e8
-
SHA1
3f14e0becebdbc83bb60a606521dc1991307412e
-
SHA256
ac8c685b5623826bce16e99b979cf5f4a65b9bf02bfb98c621ba607effdbd31f
-
SHA512
8a24119a1766e23fcf6a8469e8c452443e5ada9f9c5f09f6743a76076b5955b4100a041d559c81f2753e115415251e48b2a3db16331c8f48362913ebc0c537ec
-
SSDEEP
384:7HJtpgVtOyRsqXKj5cBSf3LIVco56WjPOgzl2eBvB8wvz+eyFTTrw39awxYM5coM:7HVgVzwDYpl2eBvBJv67FXU3p5ccIkE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5e0daf37c0bb795c9b6ffc7f684e18e8_JaffaCakes118
Files
-
5e0daf37c0bb795c9b6ffc7f684e18e8_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 636KB - Virtual size: 636KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE