Static task
static1
Behavioral task
behavioral1
Sample
5a11892e12297100d14c8e440f54f5b7_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
5a11892e12297100d14c8e440f54f5b7_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5a11892e12297100d14c8e440f54f5b7_JaffaCakes118
-
Size
122KB
-
MD5
5a11892e12297100d14c8e440f54f5b7
-
SHA1
5470e5d482c28343a922daebfa1cd96bb300bb04
-
SHA256
59a72d2235b38df02ba37e86790b0768a6bbc6633f8f6d4b626d53d22232e6dd
-
SHA512
7140e8a750412bba21b0bc82eb44dac80298e58f764c8bd402d3d1366350db5e5427e0e3c173c48fa2b695f7a1ad516b706f74b1b6722a2d8d1ab01e5db30d5b
-
SSDEEP
1536:/fuMPwFrDMKmoBzwwWXf/0j/gqonxzP7o9WNVe8uwoH//ch8M4JNBDGcLdVZeohn:O7DMToBlLgVPock8pJcLdeohrh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5a11892e12297100d14c8e440f54f5b7_JaffaCakes118
Files
-
5a11892e12297100d14c8e440f54f5b7_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.Upack Size: 296B - Virtual size: 688KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 121KB - Virtual size: 152KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE