Static task
static1
Behavioral task
behavioral1
Sample
5a30cfd541fc6569a1de02723a91fc30_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5a30cfd541fc6569a1de02723a91fc30_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5a30cfd541fc6569a1de02723a91fc30_JaffaCakes118
-
Size
278KB
-
MD5
5a30cfd541fc6569a1de02723a91fc30
-
SHA1
6250dab3b9d15258b27f3e83a2b38b7ee71e26d1
-
SHA256
5a5cf89021451a893898ed715abf884d1b1c5b53855f702ebd2bd9e804d7e371
-
SHA512
5bb17176475c061e5d34aadeb23d12029c1c4f73c4fdc76d93af57d8ef16f3aaee44ab1db451844cf61321a0ab61cdaeec195ee784e6404a06e3d4fadd5a9ce0
-
SSDEEP
1536:aC7MTQU9uaeucw0Ld5OtttttttzMDpVwjtCnzMkCnLFoyF4HwfBIl9h2yUdzdbCI:aoMTQU9ne7sMwssB2uRCJL7CjgXbZxxI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5a30cfd541fc6569a1de02723a91fc30_JaffaCakes118
Files
-
5a30cfd541fc6569a1de02723a91fc30_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 312KB - Virtual size: 309KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ