Static task
static1
Behavioral task
behavioral1
Sample
5a67688f20de65fcea8efc10ac2b3bab_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5a67688f20de65fcea8efc10ac2b3bab_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5a67688f20de65fcea8efc10ac2b3bab_JaffaCakes118
-
Size
694KB
-
MD5
5a67688f20de65fcea8efc10ac2b3bab
-
SHA1
84016b9cb47b1fbbc8685e007cc44beeb3ab788f
-
SHA256
3101ad4b029f5a32de75b564b6116839b5fbaf9611f59d24d3a6f0762234382d
-
SHA512
6611f9ef6098e4da72c5ea60a7830365f040e7172e5836ea06656b7e229b3e3fa9b7059e8823171cc35e764fef182f9a357fc6da41da6cc1deb0b133ac0cbd39
-
SSDEEP
12288:mADKGnKEkvmCaKguL8Vmuz4FMt3UD+wvo6oFUL4TeCnXjR:m4djGmCwQ8VvQukD+wBGUcTr9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5a67688f20de65fcea8efc10ac2b3bab_JaffaCakes118
Files
-
5a67688f20de65fcea8efc10ac2b3bab_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.gonepm Size: 1KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.5cqoi5 Size: - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.2b0a4c Size: - Virtual size: 5KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.b16sdd Size: - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.z9galj Size: - Virtual size: 16B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.hsdeik Size: - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dwifb$ Size: - Virtual size: 69KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 157KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tss Size: - Virtual size: 3.0MB
.info Size: - Virtual size: 428KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 680KB - Virtual size: 684KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE