Static task
static1
Behavioral task
behavioral1
Sample
5cf57b9d4e5a570038aff8ad2b60cc90_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5cf57b9d4e5a570038aff8ad2b60cc90_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5cf57b9d4e5a570038aff8ad2b60cc90_JaffaCakes118
-
Size
358KB
-
MD5
5cf57b9d4e5a570038aff8ad2b60cc90
-
SHA1
1e73996e6e63403004eedaeb3680570ef4f6fd9c
-
SHA256
44cc7e6b537f6ca3b89fccd9afd438e623da9622a3489a39746db4d511431941
-
SHA512
8703dc48a9526a28be55be867fad4be7d8edc08f3268a204f63db7f84b527b13cd557727fc9b2125f2200a010dbe1d19fdf136b4757e3276f3eeef070dc36eae
-
SSDEEP
6144:rLHSh8WmsN3jFTdhjOjn1MMH7MMR+eL2AeT7i2l2gHgz39Hg/MWX0UgJs+:ru1mkjFTdUBMMbMMR+eXefi2ZHKgMWXE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5cf57b9d4e5a570038aff8ad2b60cc90_JaffaCakes118
Files
-
5cf57b9d4e5a570038aff8ad2b60cc90_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 131KB - Virtual size: 130KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 23KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 30KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.mjg Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE