Static task
static1
Behavioral task
behavioral1
Sample
5cfa098565ab8371f742c54766953aa3_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
5cfa098565ab8371f742c54766953aa3_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5cfa098565ab8371f742c54766953aa3_JaffaCakes118
-
Size
41KB
-
MD5
5cfa098565ab8371f742c54766953aa3
-
SHA1
4d56e0057ee9d18c8da99f60b29c2e20c9563f56
-
SHA256
7ec10f5050df2b774ab128853f5f7f8a4a6ee97ce4e8bffd6ca51e417860b5e4
-
SHA512
f973d1b68329b5af9193b47c9981b141dc43fca80056a97b73c3097a01b0962a5bc070649eb7bce0487f418091b8f8b83ff6db4ffef94ef434772de7a374d1a6
-
SSDEEP
768:X4B2JGYVNfV6vrFDPwp2Gt7YHN0m5vcdXwPXDzHvzExAPOE/3MwVrJ7H8oWXRrKU:XC2oAfIrJwp2Gium5vcxwPzzvzEx6L/K
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5cfa098565ab8371f742c54766953aa3_JaffaCakes118
Files
-
5cfa098565ab8371f742c54766953aa3_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.Upack Size: - Virtual size: 160KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
HaoTian Size: 512B - Virtual size: 520B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE