Static task
static1
Behavioral task
behavioral1
Sample
5b3fedbbd9f9db4bd2a830acfcf30281_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
5b3fedbbd9f9db4bd2a830acfcf30281_JaffaCakes118
-
Size
936KB
-
MD5
5b3fedbbd9f9db4bd2a830acfcf30281
-
SHA1
6b0d67a3d14aa9bfe8bbe46e448d62469a29e5ca
-
SHA256
9a012c9b8127730ffdc2391b25abff1d41ac5f59b234a493d782e85d4379859d
-
SHA512
3525317875dac99213d7bc364b7faf2469a437f8c7667869e728bc1252dbe63fbbba5af9a5ee9f95c33d58516b407e8a3e936baf2a20e35853d0f78d086f90e3
-
SSDEEP
24576:3do9f6v1HOgQOobbT8KYAl9tMY0FXN9eySxehPCABpYOf6h/:3u9CtHO3FHl9UNspx7ic/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5b3fedbbd9f9db4bd2a830acfcf30281_JaffaCakes118
Files
-
5b3fedbbd9f9db4bd2a830acfcf30281_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
Size: 641KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 128KB - Virtual size: 184KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 161KB - Virtual size: 384KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE