Static task
static1
Behavioral task
behavioral1
Sample
5a780bcf92ab930c02436a8a542ed26c_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
5a780bcf92ab930c02436a8a542ed26c_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5a780bcf92ab930c02436a8a542ed26c_JaffaCakes118
-
Size
323KB
-
MD5
5a780bcf92ab930c02436a8a542ed26c
-
SHA1
16c0fa2dcde931b8b24848413771fa1d02a8cc04
-
SHA256
1ed0c0802d900bce6c65347d4298c4c838cdcfcdefa78ba69705622564ac8b68
-
SHA512
92503ba5ae680e288605e8f507823933a4dcb2df04c149c633105602397a1382d54426110b2b6e21d82e68746d9022945fa6edf65ef75e78459cb67fbc31541b
-
SSDEEP
6144:LDcuonUDxN9Gep6vuwRgCxVZ6SyLiSNVy3FkZQW8HKH2CpnzNT0rTIYSy:3T0UXz1wLDyLHNVcFk1AKHnnTxYSy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5a780bcf92ab930c02436a8a542ed26c_JaffaCakes118
Files
-
5a780bcf92ab930c02436a8a542ed26c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.textbss Size: - Virtual size: 188KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 317KB - Virtual size: 320KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 193B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 28B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ