Static task
static1
Behavioral task
behavioral1
Sample
5be3aa2f54aae2b026a879ce48b8d916_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
5be3aa2f54aae2b026a879ce48b8d916_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5be3aa2f54aae2b026a879ce48b8d916_JaffaCakes118
-
Size
321KB
-
MD5
5be3aa2f54aae2b026a879ce48b8d916
-
SHA1
be3ad7b6855a2d4b704ff2e9ad72dd5e79520921
-
SHA256
d24cc86be0666b43d6c49ad4c219db32800b76b68672071bc29d970ee6be8388
-
SHA512
61b238c4cbdb6528003cbe873bdde4b60fd8dd8ace4a1bc97c248ce67b390beba93db39b987debac307773e9a8daf4777c73370b2ea7fa7826187a39f216eefe
-
SSDEEP
1536:TVTaYsnrzQubj/yQCGjJ1X6bSXMtGtKG:ZTSnrxPKQCGjL6bSXM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5be3aa2f54aae2b026a879ce48b8d916_JaffaCakes118
Files
-
5be3aa2f54aae2b026a879ce48b8d916_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
�����%�g Size: 292KB - Virtual size: 292KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
N;��,�\a Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE