Static task
static1
Behavioral task
behavioral1
Sample
5a5e48064611e7d6f954b6047f9ec257_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
5a5e48064611e7d6f954b6047f9ec257_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5a5e48064611e7d6f954b6047f9ec257_JaffaCakes118
-
Size
713KB
-
MD5
5a5e48064611e7d6f954b6047f9ec257
-
SHA1
e38021b0e03f599c7a3f0ec50643156e66ae439b
-
SHA256
5fa6fa3b4d912685499854742e7e1b6af925f8ac4f3ce752754fd16d2d1072a9
-
SHA512
b8ecc201780b7f24aa613bf1e866b9a3ace923673de471b86136c01bda309b8ba65dc23ecfc5144e9ed65a12a90f56de3da43886d7b33a994c20b864dad0230f
-
SSDEEP
12288:OqL9DM6YJqolb2lF9bJCPnBJH9I1yr3QHnWe8CMCxYZARHDuXVCqIsA099cj8:19NYo1lFuZDjQHBMCxJRiCqIsAxj8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5a5e48064611e7d6f954b6047f9ec257_JaffaCakes118
Files
-
5a5e48064611e7d6f954b6047f9ec257_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
MEW Size: - Virtual size: 2.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�uۊ�� Size: 713KB - Virtual size: 772KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE