Static task
static1
Behavioral task
behavioral1
Sample
5c94fb2c61944a76f6d5a2942f3fa304_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
5c94fb2c61944a76f6d5a2942f3fa304_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5c94fb2c61944a76f6d5a2942f3fa304_JaffaCakes118
-
Size
37KB
-
MD5
5c94fb2c61944a76f6d5a2942f3fa304
-
SHA1
a6ce5684bb4fca983a3d4889b28bb1dcc61c2c60
-
SHA256
33787859194a97d62568c9614c1cd3ff4711408b6bff37a7059304b4f90a0caf
-
SHA512
19b98cf7ac0c94f9714f238a0da4007613178343ad56e1a3e49445123b76d9cad89b6b6ee45ad61b90676ee9b5559185e00ec477228f77a24d97f289c413a224
-
SSDEEP
768:Z3d21oFPFeODD4ieeurvidJIz4EGMgoY+go8qXx+dCb:dd2SPZ4BeJIEERC7Cb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5c94fb2c61944a76f6d5a2942f3fa304_JaffaCakes118
Files
-
5c94fb2c61944a76f6d5a2942f3fa304_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 35KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
8way Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
8way Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE