Static task
static1
Behavioral task
behavioral1
Sample
5cd29a3f2df1bcb872842b4c2b28ceb5_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5cd29a3f2df1bcb872842b4c2b28ceb5_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5cd29a3f2df1bcb872842b4c2b28ceb5_JaffaCakes118
-
Size
696KB
-
MD5
5cd29a3f2df1bcb872842b4c2b28ceb5
-
SHA1
aa3c48b6d66ae3e1fa5541fb6219dc9521742998
-
SHA256
40d588828ee3ad2194bc4a25572347480aa8315f9d38ec620b01628eee64ead9
-
SHA512
406eb2140f2186878f2c13bbdaf8b17a27a5d2275c1df00c7dea8f42a7fb86d288150cd389ddab983f81e2aac78d6032a467e02a23c8e42e7b77b39e62b694ef
-
SSDEEP
12288:5SDe2ZpnPmLcYZc7EN98rvB+gtn5M8fMS5E4uiEC+W3M5pEWvUSNAxz9zw18k7WE:Ee2Z9OLcYZtaF+Ufn+Wc5CMUcAt9YBc6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5cd29a3f2df1bcb872842b4c2b28ceb5_JaffaCakes118
Files
-
5cd29a3f2df1bcb872842b4c2b28ceb5_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.Upack Size: - Virtual size: 14.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 695KB - Virtual size: 724KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE