Static task
static1
Behavioral task
behavioral1
Sample
5cf54e6c233307e865eb9a03ada08350_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
5cf54e6c233307e865eb9a03ada08350_JaffaCakes118
-
Size
839KB
-
MD5
5cf54e6c233307e865eb9a03ada08350
-
SHA1
acebc529d43ef002ed8f5ffeee5c4897d9942104
-
SHA256
c8105a1c7192d28f3e14873f586de75f2c6fa08981f2e4d489abcd03dcfb025a
-
SHA512
f3efacc68cbf7ab6c81216039f9f42bf7e49625e7136a9c53e4c315fe66f75345a60c23050f34ebef8b918e4c9a2e215bbee3debd3fff15239fdaf1c37a54360
-
SSDEEP
24576:tHU05mUQXW6bH0hUXptfE3ppK/cRgOnmq9g6e4:OLbXXptc34cOU7m6d
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5cf54e6c233307e865eb9a03ada08350_JaffaCakes118
Files
-
5cf54e6c233307e865eb9a03ada08350_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 464KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 369KB - Virtual size: 372KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE