Static task
static1
Behavioral task
behavioral1
Sample
5d292ee5a7f02b1cce59cc16a8f2d47d_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
5d292ee5a7f02b1cce59cc16a8f2d47d_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5d292ee5a7f02b1cce59cc16a8f2d47d_JaffaCakes118
-
Size
382KB
-
MD5
5d292ee5a7f02b1cce59cc16a8f2d47d
-
SHA1
0a8f03dee2e28be8f79236fdefcb2d6bea5cbfe9
-
SHA256
641348f3a6d2c3d7b29c302ad4278d1958a527b7dec3be5329d15d613843a98e
-
SHA512
c7c7d297c4a7b4fa92b3add65b88b507a5d81a9fcd0a6b94fe47f48ad906833b4eb84de1b253d6ab58d9c2ee38de58a2c54e185902cdba7c981e0b00b71327df
-
SSDEEP
6144:sciqvdXj8wTc++mnaGnoF9pQ1hOwcCz2r+Ral/M9wFI+6AU0B34VZCB8rymFSMJu:scigdXAwI+kcoF9Gcwz6+slawD6A8cEY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5d292ee5a7f02b1cce59cc16a8f2d47d_JaffaCakes118
Files
-
5d292ee5a7f02b1cce59cc16a8f2d47d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
�g�ўtN Size: - Virtual size: 160KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
:$VJ?W?� Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
O���y|r� Size: 374KB - Virtual size: 376KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
�����~& Size: 221B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
%�J�`��p Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ