Static task
static1
Behavioral task
behavioral1
Sample
5bd7e3a6c388c65376a5465c172d61ed_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5bd7e3a6c388c65376a5465c172d61ed_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5bd7e3a6c388c65376a5465c172d61ed_JaffaCakes118
-
Size
605KB
-
MD5
5bd7e3a6c388c65376a5465c172d61ed
-
SHA1
acf74d00da4b420e41d35e974b8374300b78e3af
-
SHA256
41bbbbd3c99110ca61683408e4bca349e92ad6ba9dd4ef37824a1e4430d6a20a
-
SHA512
f9721e28c15b43a356d55e3fb839bc3cfef3b35b31958764ff9749d0ba450e29201db1bf4da152cb97dca4b044ffddaee5919e727e39aafd6e32699e2f4fbe7b
-
SSDEEP
12288:ZplRdeYxlbb83Tg4oxEw/21XLHr+FlRnSmWR2UkpSfQKU7r7k1lo+CI:ZplHRv83U4ox417qgipSft2rA1loh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5bd7e3a6c388c65376a5465c172d61ed_JaffaCakes118
Files
-
5bd7e3a6c388c65376a5465c172d61ed_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 523KB - Virtual size: 522KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 16B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 33KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ