Static task
static1
Behavioral task
behavioral1
Sample
5e398c9eb05d4d63d5fa4d86c9b6ce84_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
5e398c9eb05d4d63d5fa4d86c9b6ce84_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5e398c9eb05d4d63d5fa4d86c9b6ce84_JaffaCakes118
-
Size
599KB
-
MD5
5e398c9eb05d4d63d5fa4d86c9b6ce84
-
SHA1
d6671f37892b5ac7136ee59bd0ed55876e3d59cf
-
SHA256
37e81594d8d369cce59f8753dc9a5158bbe87aeec8b256b9b318c9bab11ca266
-
SHA512
8de8374cd771f9e43207f44b1f49a7aa67ef017dd2888a98970c56153b630840d4eea342d04cea22499cc1ff973c65ac49f6f546dfd2f3a63efb9ba0fdf4ddb0
-
SSDEEP
12288:/e6DtHtIF4gPfTAN9rJQF3Z4mxx4cHxJ257n+fkbdKQOz7:26bIvPcN9GQmXXA5b+fkbE7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5e398c9eb05d4d63d5fa4d86c9b6ce84_JaffaCakes118
Files
-
5e398c9eb05d4d63d5fa4d86c9b6ce84_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: - Virtual size: 764KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 279KB - Virtual size: 280KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 314KB - Virtual size: 316KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE