Static task
static1
Behavioral task
behavioral1
Sample
5ad8dd1393562e72ec63c967631a9852_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
5ad8dd1393562e72ec63c967631a9852_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5ad8dd1393562e72ec63c967631a9852_JaffaCakes118
-
Size
3.3MB
-
MD5
5ad8dd1393562e72ec63c967631a9852
-
SHA1
811c29e06f5b826b69140833188543d091f3819d
-
SHA256
11b5fd8d8a218cf9451daf0b1d01aed1195445d21b0d9b5ba64353fa1df3f0b1
-
SHA512
9f92393d13505d583f411296b66870951890daf643cea17891fc4d9b7b9a00cd09ae7987189778f4cf1a9fc561a4729cc1765c5556e8ad5317a92bf6124e4716
-
SSDEEP
49152:ox93yQdU2Vo0M/uI5Tni1Mr/Zxvj7Fkcx2tjZe57By4sIYM2oQ2d+10Q0fR+Jrwp:yGbf/uI5GO7Zx77FkSs+Qk+2AwG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5ad8dd1393562e72ec63c967631a9852_JaffaCakes118
Files
-
5ad8dd1393562e72ec63c967631a9852_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.Upack Size: - Virtual size: 7.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3.3MB - Virtual size: 3.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE