Static task
static1
Behavioral task
behavioral1
Sample
5ced9ac9303c3cf98f1bc489cd4fc2bf_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5ced9ac9303c3cf98f1bc489cd4fc2bf_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5ced9ac9303c3cf98f1bc489cd4fc2bf_JaffaCakes118
-
Size
85KB
-
MD5
5ced9ac9303c3cf98f1bc489cd4fc2bf
-
SHA1
997c28e069b0abc7a647155fc5916168df6bef9f
-
SHA256
61af56824faa29f6f7bf15617a95027fcabebe4b34d0389d6784c31f57b5e018
-
SHA512
024cba6995555456c2317306a4c5b545f6acb033e20e073e28ba0a8f4d1b44f8f5b37c7dbf0025d0d49318abfb4122a16ad9220dc5f127719bc518e1dc09099b
-
SSDEEP
1536:WsnZVoucz6Z4mtxZJSKb//5860iKXiHedRwMPSzh95Ji8BA0AvYDpKETy:Wd76Z4mZF10tqqWMo5JihL4p/y
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5ced9ac9303c3cf98f1bc489cd4fc2bf_JaffaCakes118
Files
-
5ced9ac9303c3cf98f1bc489cd4fc2bf_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI
Sections
packerBY Size: - Virtual size: 200KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
bero^fr Size: 84KB - Virtual size: 83KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE