Static task
static1
Behavioral task
behavioral1
Sample
5af88a4257437dbfb00b68022b8ca9dc_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
5af88a4257437dbfb00b68022b8ca9dc_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5af88a4257437dbfb00b68022b8ca9dc_JaffaCakes118
-
Size
48KB
-
MD5
5af88a4257437dbfb00b68022b8ca9dc
-
SHA1
b26f81cd6bd9d80f9ee9792e032633037d28266e
-
SHA256
57d761ef6c0385f26d27ffd074376d4b94c31dfe12f30e753b13aea6292e886a
-
SHA512
ba6182133820d586072423e6f69c127451a7fed5b0562b001d5169c5b3b4b67beea048a4839460f0cb9e54f76de42dd468f211b02f234a5a75deb452f2e44cdc
-
SSDEEP
768:ZmTwsvuaGeZS92qiZKXVK2dotGL92NvuCzflUPR11BnZ4sS4WW46pPL:ZUZsUKXwKos1C5396pP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5af88a4257437dbfb00b68022b8ca9dc_JaffaCakes118
Files
-
5af88a4257437dbfb00b68022b8ca9dc_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 28KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.plugins Size: 4KB - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ