Static task
static1
Behavioral task
behavioral1
Sample
5e0f87867991207bf92b20949c8080f8_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
5e0f87867991207bf92b20949c8080f8_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5e0f87867991207bf92b20949c8080f8_JaffaCakes118
-
Size
1.1MB
-
MD5
5e0f87867991207bf92b20949c8080f8
-
SHA1
708d4b93e8aa34cacca1d79873a6664e5e569cfd
-
SHA256
4f25ca813b309054b26b785a91908301780fab3362c2c6116191d10dde3d5589
-
SHA512
4c2ef6eb37394b49ad2cb71a14dc095e5b1fe491b3a85a4fd02b32c506cef0388a1648b0b4e84e2c2b81125b7f731f1bba99b8d0b0726c3a7e95bb625f2032ee
-
SSDEEP
24576:UzVneASEbMHFsXlglhpTuPiazLkVCUI1Xt9hDGugs:UzVneASEb8CXuxTu6a3Mk1Xtirs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5e0f87867991207bf92b20949c8080f8_JaffaCakes118
Files
-
5e0f87867991207bf92b20949c8080f8_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 61KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 12KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 100KB - Virtual size: 100KB
IMAGE_SCN_MEM_READ