Static task
static1
Behavioral task
behavioral1
Sample
5c7405957f18f8dc52bc6b360c2857d9_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5c7405957f18f8dc52bc6b360c2857d9_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5c7405957f18f8dc52bc6b360c2857d9_JaffaCakes118
-
Size
929KB
-
MD5
5c7405957f18f8dc52bc6b360c2857d9
-
SHA1
7a59f63181599bd4073163c18ed655382ba4fea1
-
SHA256
04db3653e9b4238acf8727339dba82f95858db4825933465413b3d5e3f622519
-
SHA512
bad9420ce294278bac5817bf01e638d1c1b7fef1afa1eeb940359e7ded8e7fef5c2e0c018a73fc9a01e16413e7381dc482e46cbc17af259b42265dc33de2d687
-
SSDEEP
24576:AtnEReaHNyC815hy03udkE3/vyoRxTMWtjJ:AZELtW3LeauTLtF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5c7405957f18f8dc52bc6b360c2857d9_JaffaCakes118
Files
-
5c7405957f18f8dc52bc6b360c2857d9_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 791KB - Virtual size: 790KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 16KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 20B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 55KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ