Static task
static1
Behavioral task
behavioral1
Sample
5b673d318fec4f578df1a7708e8ff1a2_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5b673d318fec4f578df1a7708e8ff1a2_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5b673d318fec4f578df1a7708e8ff1a2_JaffaCakes118
-
Size
392KB
-
MD5
5b673d318fec4f578df1a7708e8ff1a2
-
SHA1
3f3fe884e8e4a54a0f13d83fff3cad7fd9f2b944
-
SHA256
18c09e5a36292a8274fe10f27e2a05bc2dcda8518a15db14fbe71baaca21b4bd
-
SHA512
ecb7c10dd4fd9300517a9a02613a1463e9b6125b5b0663c6ae2f46c8b6089048e30759943d7aa9beda8e3c673fc03f124a227cb9e568fd261a9a5bcde3b30b25
-
SSDEEP
6144:giQW6OICz/ahQvTJQ9NpkfdV5cIa6S3ouCZFU1Xx+qlpIQsJ25f+uEx89JOMjGB:ZQFCz/ahQTG6R63ouCHU1cERYXx+MB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5b673d318fec4f578df1a7708e8ff1a2_JaffaCakes118
Files
-
5b673d318fec4f578df1a7708e8ff1a2_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 12KB - Virtual size: 261KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 276KB - Virtual size: 275KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 100KB - Virtual size: 99KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ