Static task
static1
Behavioral task
behavioral1
Sample
5b3f6c04d86a401e4cd9d7b2e855a4f6_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
5b3f6c04d86a401e4cd9d7b2e855a4f6_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5b3f6c04d86a401e4cd9d7b2e855a4f6_JaffaCakes118
-
Size
19KB
-
MD5
5b3f6c04d86a401e4cd9d7b2e855a4f6
-
SHA1
3164fd58f28433d5c52f54143eae7e4c0ede670d
-
SHA256
f0e1890404ea402788e3c78baeb0babaaeab0434620b8d46c98018fd26ee5f3d
-
SHA512
a75602dd113ecead40ebe364e4d72b8a2cf1140c15891d3303320aff07f704185bf1ebfbb96023cc021da17711a641572f0d79ac46492d068d9e2bb5fd4a212f
-
SSDEEP
384:1O1rmQBnLDbgT29klGC1Hx9NhPlvfZAy8tRmF5OeqpaZCAga0xT:qxLc+SGMxXXvhAhsTXU9a0xT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5b3f6c04d86a401e4cd9d7b2e855a4f6_JaffaCakes118
Files
-
5b3f6c04d86a401e4cd9d7b2e855a4f6_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 18KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE