Static task
static1
Behavioral task
behavioral1
Sample
5ba5da9eefd71e3cc1bc0e332f11ff5f_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
5ba5da9eefd71e3cc1bc0e332f11ff5f_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5ba5da9eefd71e3cc1bc0e332f11ff5f_JaffaCakes118
-
Size
564KB
-
MD5
5ba5da9eefd71e3cc1bc0e332f11ff5f
-
SHA1
f1466554de8cdeb1cf84b14c03bc20a081822da1
-
SHA256
5be681fe408113f9b68e7d906516cc06c9fa93c78ffabb1079d3c0b4d77b8aab
-
SHA512
50d06ebaea2c892ec0e0201642e6c2b6ec8d9ab9457e0b92059d973c91d73eac796a491145e6b220dc6e318147abca90315efcd18021437c4f79dff905433463
-
SSDEEP
6144:zAbgJW/+roDJXfyX13eFU8uzRakotQP6Dkzdyv0B5r4J1L:zegJW/lJXfyF3eUueMvycJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5ba5da9eefd71e3cc1bc0e332f11ff5f_JaffaCakes118
Files
-
5ba5da9eefd71e3cc1bc0e332f11ff5f_JaffaCakes118.exe windows:0 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.code Size: 396KB - Virtual size: 396KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 136KB - Virtual size: 136KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�~92 Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata2 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MaskPE Size: 4KB - Virtual size: 4KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MaskPE Size: 4KB - Virtual size: 4KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE