Static task
static1
Behavioral task
behavioral1
Sample
5cd9f6c230cbde3c435d6ae1f4b578c7_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
5cd9f6c230cbde3c435d6ae1f4b578c7_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5cd9f6c230cbde3c435d6ae1f4b578c7_JaffaCakes118
-
Size
1021KB
-
MD5
5cd9f6c230cbde3c435d6ae1f4b578c7
-
SHA1
0600247fb44176c221267428b537328fa0b01367
-
SHA256
659e050abff87a4c90c463610091badba36b9145ebda1c0d04b00b900514d532
-
SHA512
5f2baedbdf675c6189bb3016e244dd06c4bf9cbbcde68a77f1afd5cededc5f6f34cd94007e7f3c54356d688e76a76a556b1efae06d5865c94cdfe244fc5d9723
-
SSDEEP
12288:Bpry4BbYDHKA8Z84xGdZN7DJqYNvVdQApSoCfGU9dOQvq4WwI1/ieMjJyBWuV:Bpry1HKw4sZN7tNTdtpP4q46BayF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5cd9f6c230cbde3c435d6ae1f4b578c7_JaffaCakes118
Files
-
5cd9f6c230cbde3c435d6ae1f4b578c7_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
-� �{�f� Size: 484KB - Virtual size: 484KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
���bH� Size: 417KB - Virtual size: 420KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 22KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE