Static task
static1
Behavioral task
behavioral1
Sample
5c950068182406ece8c39fa9b94974c0_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
5c950068182406ece8c39fa9b94974c0_JaffaCakes118
-
Size
329KB
-
MD5
5c950068182406ece8c39fa9b94974c0
-
SHA1
52fd2c0d84f1f5115a8b0d7031b3bd2e7fe10de4
-
SHA256
b89876652bbd9842219ca7fab5a6c3a331a245b42c5091e640d4bc1fea5557bc
-
SHA512
50f2fb2e1d3b34b75c316aec298b79cdd404302eef083d2f120ca9ebd854530ce90c0aac05e4c817bbdb7e57d70ba9fc3909c73eab01e3eb5223651d6ae073e0
-
SSDEEP
6144:oNF2idZecnl20lHRxp3gXlk9ihl0/srEQpPK+e1FtEuxF+U2/kdLL+G:uF3Z4mxxYoEtlK+kt9T2MdLv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5c950068182406ece8c39fa9b94974c0_JaffaCakes118
Files
-
5c950068182406ece8c39fa9b94974c0_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 8KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 248KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 315KB - Virtual size: 316KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE