Static task
static1
Behavioral task
behavioral1
Sample
5dfa46bec22c95b445465ccce42bbb36_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
5dfa46bec22c95b445465ccce42bbb36_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5dfa46bec22c95b445465ccce42bbb36_JaffaCakes118
-
Size
1.1MB
-
MD5
5dfa46bec22c95b445465ccce42bbb36
-
SHA1
33bfc9be85df92ef4e5f18976ad2bf17d9143faa
-
SHA256
468de149d8b00ae8f4b7c6537ee16eb1a65603a27332bfb188706717506b4a50
-
SHA512
ccf29bb3821c285eeb59db003aa4a53a0fdb31584c3f1791d14e6b7c3d69bbdc696f13cdccca05828a024328b5bd39cf3edf75434cbdc8da2ee511c46f4405a0
-
SSDEEP
12288:UKcab//Nis9Mu5KTlQj7Ifg+BoHLTmvNj3BRt8h/oFtWmuIZmszqLpSxVSIwSYiZ:/BT/VMr5KHY9X6m3UrSrYBzASon
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5dfa46bec22c95b445465ccce42bbb36_JaffaCakes118
Files
-
5dfa46bec22c95b445465ccce42bbb36_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 898KB - Virtual size: 898KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 7KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 16B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 55KB - Virtual size: 55KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 149KB - Virtual size: 149KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ