Static task
static1
Behavioral task
behavioral1
Sample
5c2ea8e05e35b9017b7875fff439d038_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
5c2ea8e05e35b9017b7875fff439d038_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5c2ea8e05e35b9017b7875fff439d038_JaffaCakes118
-
Size
575KB
-
MD5
5c2ea8e05e35b9017b7875fff439d038
-
SHA1
5561cabea7c88e802ee1d670105ac99160143e96
-
SHA256
d3daa693ce522363d33f84a5c731b5feba4e1002ed97aebae63d4fea99ae4141
-
SHA512
d0ffaf22980871a01f80d333dc50b5bd354730febdd199de1f7341c6b1043d59e4f63bdcd63e15da7f812060bcb2a0b165829095e5f1bab0a89e778c9d483916
-
SSDEEP
12288:VnGYSHKndNmi+LIAS/kmqogbfW1pf5PxZZWm6HyR5MCgK:ttdNL+LIAOkbhurUNSR5MCv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5c2ea8e05e35b9017b7875fff439d038_JaffaCakes118
Files
-
5c2ea8e05e35b9017b7875fff439d038_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.itext Size: 4KB - Virtual size: 292KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 564KB - Virtual size: 568KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ