Static task
static1
Behavioral task
behavioral1
Sample
5ca3ca002386d7b9813ac08a612d5e2f_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5ca3ca002386d7b9813ac08a612d5e2f_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5ca3ca002386d7b9813ac08a612d5e2f_JaffaCakes118
-
Size
500KB
-
MD5
5ca3ca002386d7b9813ac08a612d5e2f
-
SHA1
9eefb77717a87db394327e28c049c96d1e57a9c9
-
SHA256
2b67523ff2d17f5d20ea7a6d75b4cdd94315936c82a321af081bc8f7f32af561
-
SHA512
7721bb642d3e9e4d7e80d5eabf6b5459f66776344a830e997584e9e79da18856d9e46638fdca7a24ad1d363afcd72b0a838d9b094227f1f88d8472bc545b2add
-
SSDEEP
6144:gJCPbf/j4kevSDBXPIt3b2DvjNTE6/GSlCu2DlxCj2TjBQyRZilUATnuy1aVJlwZ:gJCrTNXQovRTOSPgxCLjuy0pxZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5ca3ca002386d7b9813ac08a612d5e2f_JaffaCakes118
Files
-
5ca3ca002386d7b9813ac08a612d5e2f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 16KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 750B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 472KB - Virtual size: 470KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE