Static task
static1
Behavioral task
behavioral1
Sample
5ad36704bae63589f36c162b1c0bf8cd_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5ad36704bae63589f36c162b1c0bf8cd_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5ad36704bae63589f36c162b1c0bf8cd_JaffaCakes118
-
Size
97KB
-
MD5
5ad36704bae63589f36c162b1c0bf8cd
-
SHA1
8ab69a5b8fdbe7c7198843203da2bb4d294430a6
-
SHA256
1cd5c3e02a1ff47946ed148482ee0c55f897b12c2e0c808a2f9a6ff89017cb4c
-
SHA512
1be67cec7defa00062a90ce3d4068c49f51341a08bfcc9474c40eb78626ad125b6d52eb564560ba16ca115b4aa43bb57ed26944cd1a55ec597778c16558d649a
-
SSDEEP
1536:jJzqvbS77co8MlGdndQ3yPYmT19Y7vL+1KNB3yeI0iPG/:NzqzS77zVl+ecvYf31
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5ad36704bae63589f36c162b1c0bf8cd_JaffaCakes118
Files
-
5ad36704bae63589f36c162b1c0bf8cd_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 336KB - Virtual size: 332KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ