Static task
static1
Behavioral task
behavioral1
Sample
5af9cae533af0a2a911ec0fb728c99ab_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
5af9cae533af0a2a911ec0fb728c99ab_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5af9cae533af0a2a911ec0fb728c99ab_JaffaCakes118
-
Size
222KB
-
MD5
5af9cae533af0a2a911ec0fb728c99ab
-
SHA1
99f00f41cb87fabf3cfd5592379923b8707b00bc
-
SHA256
2cb15b78c8c9da7cea2ccbcfee11e86ea7f9ccdd6e96aff913be947502d4372b
-
SHA512
dcb295983222d62cd36f252dbad207415a00510b9fbb3f56521a15132fc71fa89b95f18b5de85e445e6551daaae4d8e2042ba98e6c13366df10b7212f5590c62
-
SSDEEP
3072:7sLvz1LSlYe7tHaYUlv5OjcXIFWDOpumddCvhtjnSbS0LpiAzcOg/VXk:7evzV8Yct6Ym5OjI6UOwqdC32bAAzMFk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5af9cae533af0a2a911ec0fb728c99ab_JaffaCakes118
Files
-
5af9cae533af0a2a911ec0fb728c99ab_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
CODE Size: - Virtual size: 804KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 158KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE