Static task
static1
Behavioral task
behavioral1
Sample
5c80a06313b8000a96e91a8e47b8ef0a_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
5c80a06313b8000a96e91a8e47b8ef0a_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5c80a06313b8000a96e91a8e47b8ef0a_JaffaCakes118
-
Size
2.4MB
-
MD5
5c80a06313b8000a96e91a8e47b8ef0a
-
SHA1
919c6775ed1f5f9a5a3274a6efad8189431739bc
-
SHA256
2ca368ac2d2c5f61bf05936fd97a723e184d6584f7582b41f2942c3498bf22b2
-
SHA512
5ffb2939e6e76da3784f4912affce9734b86810b7fe28c5e078311395bd591d88b48c5994b45e3a233bb28fcf0e94bfaeda0fa06d35346d81f45769aa0913d30
-
SSDEEP
49152:LRSUwBxke72WULEcu4FI1qoouXH6I6+JWySF92ci35DvS5OAl+P5A9H77:M6I2NI1FjDSWci3tWYC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5c80a06313b8000a96e91a8e47b8ef0a_JaffaCakes118
Files
-
5c80a06313b8000a96e91a8e47b8ef0a_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
�-<0 Size: - Virtual size: 3.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�-<1 Size: 815KB - Virtual size: 819KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�-<2 Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE