Static task
static1
Behavioral task
behavioral1
Sample
5b66ccad7fda8b83db64d2df1d9a8e80_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5b66ccad7fda8b83db64d2df1d9a8e80_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5b66ccad7fda8b83db64d2df1d9a8e80_JaffaCakes118
-
Size
123KB
-
MD5
5b66ccad7fda8b83db64d2df1d9a8e80
-
SHA1
b8f23d7c1774bdf4683da65e5cef124a2c9de01b
-
SHA256
a1eda3c92e91f57204e22a4d7a10a8dde46548eb834f2fa00fd872ca19490a65
-
SHA512
521b19f82a80f4a53976c4705353aa990aa2d14b60eb55935a579625dc0d460e3c1669734548ef17d805a31c652d3831c919fae1f015f2bf4878d1c0b5e60c02
-
SSDEEP
3072:F4MTN6EaO65Z9Jwr91GHlNPHJ/N6EJqTYWQtkPzYW:F4MwEgFiuHlNPpAEJLKEW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5b66ccad7fda8b83db64d2df1d9a8e80_JaffaCakes118
Files
-
5b66ccad7fda8b83db64d2df1d9a8e80_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: - Virtual size: 208KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 121KB - Virtual size: 124KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE