Static task
static1
Behavioral task
behavioral1
Sample
5b40e03590a572191f42637cfb35c6fb_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5b40e03590a572191f42637cfb35c6fb_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5b40e03590a572191f42637cfb35c6fb_JaffaCakes118
-
Size
455KB
-
MD5
5b40e03590a572191f42637cfb35c6fb
-
SHA1
925e33f3db42045655d7cf2e489c1ffe871a8b8b
-
SHA256
4162206ffd4d1f15428848aeb601f8688aa09e127638e6d25a2fe5207166b003
-
SHA512
1c78eb077215073d5e1015a85f9acf1cb6e18e5c983491697510a6abeedaf2b19b0f845e835809e73d98dd17c5d618af8d50c92599705c85be7ad0e8c3ce01a3
-
SSDEEP
12288:z+9AXVrEYr6SDGOcREn3q5VDHkDjPE1dxJskKac6QvPY7yQe/bJ3b1RJgmw:69IEY/GOa95KXUdEbP6QXIkfRw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5b40e03590a572191f42637cfb35c6fb_JaffaCakes118
Files
-
5b40e03590a572191f42637cfb35c6fb_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 905KB - Virtual size: 905KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 199KB - Virtual size: 199KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 306KB - Virtual size: 305KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ