Static task
static1
Behavioral task
behavioral1
Sample
5a7cb3930976eec4c66eeaa2eaf850d9_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5a7cb3930976eec4c66eeaa2eaf850d9_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5a7cb3930976eec4c66eeaa2eaf850d9_JaffaCakes118
-
Size
167KB
-
MD5
5a7cb3930976eec4c66eeaa2eaf850d9
-
SHA1
344ace7f1dc2dde193b4b2636e9d1f6a2cb2a313
-
SHA256
40c330c8cd793e09b49cb2722df6ce9c582b6f84e11b75057d29465f6abba6b2
-
SHA512
75c420a5e9a304b242f7a9051bf934d1fc4e188342c54e9ccd34fad8406ffd55cf9a4a77aadb1c3818bd154ec7a654207903e72abaabeee6f735660c59a1a38a
-
SSDEEP
3072:j3m8NANiKgZXWk0G3e5IhJa9H9DLUM0vi:j2OANi1XWk0qeOh8wPi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5a7cb3930976eec4c66eeaa2eaf850d9_JaffaCakes118
Files
-
5a7cb3930976eec4c66eeaa2eaf850d9_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 268KB - Virtual size: 267KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 52KB - Virtual size: 50KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ