Static task
static1
Behavioral task
behavioral1
Sample
5e23101323d800dc735ab143b88ff51a_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
5e23101323d800dc735ab143b88ff51a_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5e23101323d800dc735ab143b88ff51a_JaffaCakes118
-
Size
739KB
-
MD5
5e23101323d800dc735ab143b88ff51a
-
SHA1
f8caec25dc2898a137e98f020357feba65fd5ab8
-
SHA256
2ba142c380ca5ae74706c2705fae206fa69e7a7b199ec774b03385c186841ec0
-
SHA512
3ad3a02e4cc57347b604e5f7356fd16f4c2d9c92d768360d5deb92a0b8785cacc83c82162cff18c68e78e7d5d32c94c6a6a2775eff540d04838dd28b3ec5968d
-
SSDEEP
12288:sCf35kIivKFEOHBoqAd7bwBRXt1vkgP4jTGCfSVc0OmkoZds1JJo:PxkvKFEO6qsIXXt1vPAvhmkwmJJo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5e23101323d800dc735ab143b88ff51a_JaffaCakes118
Files
-
5e23101323d800dc735ab143b88ff51a_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 634KB - Virtual size: 633KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 7KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 20B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 42KB - Virtual size: 42KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 34KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ