Static task
static1
Behavioral task
behavioral1
Sample
5a82ef3e423d0882fed97e34c5a1b413_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
5a82ef3e423d0882fed97e34c5a1b413_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5a82ef3e423d0882fed97e34c5a1b413_JaffaCakes118
-
Size
685KB
-
MD5
5a82ef3e423d0882fed97e34c5a1b413
-
SHA1
1954c9c53d665d988a0dc15fc8bdf314cdf97b10
-
SHA256
498a06f74ec37a061c9ed23ae0e4b0d18e065c40d0c417e1d9865ca42ed3fafe
-
SHA512
960a3918ac1fe86c3a79ae0cd9f846958436a13829a50ff03fc4d41c53a90777c45bf5210652b88847bd38e8f63c0d6c2a5eb931505a5febcb714f0ad3073ac0
-
SSDEEP
12288:hH40DEHtTsLSV7F0wmv0OAjm5fksNC6bPF3Z4mxx7nMNOmSQC+rmoog8VGjmC1:a0Dub7yNvcm5fVg0PQmX73vV81
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5a82ef3e423d0882fed97e34c5a1b413_JaffaCakes118
Files
-
5a82ef3e423d0882fed97e34c5a1b413_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: - Virtual size: 376KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 369KB - Virtual size: 376KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 314KB - Virtual size: 316KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE