Static task
static1
Behavioral task
behavioral1
Sample
5e0a61923f2b1b4909e9e11ab8ed14c2_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
5e0a61923f2b1b4909e9e11ab8ed14c2_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5e0a61923f2b1b4909e9e11ab8ed14c2_JaffaCakes118
-
Size
31KB
-
MD5
5e0a61923f2b1b4909e9e11ab8ed14c2
-
SHA1
9a67ffded3435e09389b86cf62b9498455ce221b
-
SHA256
2fac392c5190895b42f159febb71fd2e7552a3947e56c684a2ef87501df4017c
-
SHA512
fe58bcdd155410b8aeb3b8d22f2c64a00c266c902024480bd72ddb62821c7ccbf11594f956f93807a26777bf78b1724976f120d55817be8ce383ba8ba9655489
-
SSDEEP
768:lkhZ3xxvDC47H7bkrcbjUPHRIqdK2ZHZi/KQ:lkHrW47H7AY3UPc2NQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5e0a61923f2b1b4909e9e11ab8ed14c2_JaffaCakes118
Files
-
5e0a61923f2b1b4909e9e11ab8ed14c2_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.hzozqte Size: - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.acewpvs Size: 28KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bwsmdkx Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ftvyhii Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE