Static task
static1
Behavioral task
behavioral1
Sample
5e1f6f61da977aef7ab098765b66aca6_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
5e1f6f61da977aef7ab098765b66aca6_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
5e1f6f61da977aef7ab098765b66aca6_JaffaCakes118
-
Size
362KB
-
MD5
5e1f6f61da977aef7ab098765b66aca6
-
SHA1
6e7c8a1e102f3524e76511530507120412ac9abc
-
SHA256
1b59b4daf24bf9b1f3c848e38954df91df98b074363978b06842d637ded23f5b
-
SHA512
0dfb16dd675cd3ce687b711babbbc8d7277c6a3c23aff4b16d8fe42854664e5c3d94cf83e6c8d27df564637fe3b18cd59d718e9934f2363f32f5549e9c8087a6
-
SSDEEP
6144:oYzQ6gmk3ussA/D5IW3la0h1++1BI7nWfkFSBVQhAxqlLso/xlJBoS:1k3ust/D5LlHf+F6MS3ugKxl7oS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5e1f6f61da977aef7ab098765b66aca6_JaffaCakes118
Files
-
5e1f6f61da977aef7ab098765b66aca6_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
oznk Size: - Virtual size: 1.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ldjt Size: 358KB - Virtual size: 360KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE