Static task
static1
Behavioral task
behavioral1
Sample
5a1da42693394ca73739bb11980620ad_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5a1da42693394ca73739bb11980620ad_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5a1da42693394ca73739bb11980620ad_JaffaCakes118
-
Size
610KB
-
MD5
5a1da42693394ca73739bb11980620ad
-
SHA1
775df9084c2bc3435bbc391ad41829e896453dea
-
SHA256
1882fb27aa2f60afda32ddbcd112f1df15d68c1ab4244407f27364be6f98afad
-
SHA512
6d7758c2d2b92d083880f64c02a9ccf396e0219a52273dcd1b05f7faac6018b3696814c7e5e448fa57d775224d77493d2db5e24d5e35d3700229fd73379f2b72
-
SSDEEP
12288:XqOnHS7T+CMPW5Av3X4tbAYj1YJAeC1suO9KtAt8wspB5NPnvvrd6dSMLt:XxHa+C8W5AvHYZ1YKijKtAt8wqvDMd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5a1da42693394ca73739bb11980620ad_JaffaCakes118
Files
-
5a1da42693394ca73739bb11980620ad_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
code Size: 555KB - Virtual size: 556KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
date Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rstc Size: - Virtual size: 12KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rate Size: 13KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
this Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
360try Size: 19B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.teaa Size: 19KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.code Size: 1024B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE