Static task
static1
Behavioral task
behavioral1
Sample
5a7c14eb35eac972968f70b87155ac8c_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5a7c14eb35eac972968f70b87155ac8c_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5a7c14eb35eac972968f70b87155ac8c_JaffaCakes118
-
Size
380KB
-
MD5
5a7c14eb35eac972968f70b87155ac8c
-
SHA1
657b300d8e287d2ce8eaaab120b382ec32cf12fb
-
SHA256
af4511a1708418e04d9e52f778a61c6353ca9696a554a81882780564dbf1b195
-
SHA512
814a9eaa1b58b4deaf7e9b8b7113ff75378f1d04c90b05f8962bc536a7d301064e183465148c1d5eb8ae9b1d33a79b2ebecc8afaa82668efb1a7c3cd7b62c96e
-
SSDEEP
3072:h988lcx71TjSw3EWQTIhGB/sS8eHNbArZGgTcaKh8XShLyWv:h98FCxRj5sWcjWv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5a7c14eb35eac972968f70b87155ac8c_JaffaCakes118
Files
-
5a7c14eb35eac972968f70b87155ac8c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.TEXT Size: 53KB - Virtual size: 168KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.DATA Size: - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RSRC Size: 31KB - Virtual size: 292KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: 291KB - Virtual size: 292KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.udata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE