Static task
static1
Behavioral task
behavioral1
Sample
5b13e202f08d301f4fc052f9b1ac5e89_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
5b13e202f08d301f4fc052f9b1ac5e89_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5b13e202f08d301f4fc052f9b1ac5e89_JaffaCakes118
-
Size
124KB
-
MD5
5b13e202f08d301f4fc052f9b1ac5e89
-
SHA1
a2796184aa4b6db070be9ea0344015d43ec4f610
-
SHA256
925f64eeb823735f7a3e280cba69b782cb675dd8d0782ca2b3de1d5f8baa9a81
-
SHA512
e96a7ff67829b3db8379fa1b7937eca056db232732585816d401aab45d1775abfd127202fef9f4211ebb10fdddac513b80cd9859b890522152ed00b6edc49580
-
SSDEEP
1536:QpSwAhd6jAHjvQyz4q9Cop56US4IY5RzGva0t6nnqfbSGeSEy:O8hGAHjQytpoUNIozsGnnqfx11
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5b13e202f08d301f4fc052f9b1ac5e89_JaffaCakes118
Files
-
5b13e202f08d301f4fc052f9b1ac5e89_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED
Sections
nsp0 Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
nsp1 Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
nsp2 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
nsp3 Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
nsp4 Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE