Static task
static1
Behavioral task
behavioral1
Sample
5d85b54a9d9df89f6dcdb53da2db6949_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5d85b54a9d9df89f6dcdb53da2db6949_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5d85b54a9d9df89f6dcdb53da2db6949_JaffaCakes118
-
Size
29KB
-
MD5
5d85b54a9d9df89f6dcdb53da2db6949
-
SHA1
7c8f286d6c79084afe0e737f9675e0946be66763
-
SHA256
6c56bf7e4232c14a4c16d306edbc77e250e4d32579c3fcd97d3d2154b99e7258
-
SHA512
2903cd79d2051f43e5a89b997d87952eb1f92dca6d300d0abff60ca54dfe1b2ef7fd4b90468762a8ed5a0771c4b9d32f52686a204c5bbfde60c5e0a02086adfe
-
SSDEEP
768:fkRIZZGsp9dx44n/NrLHbn8Ph/sUEQ9xlVzxDBZkXwIVBiA3RX0L:CtsLdx44n1vHctOCP3d6Jli
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5d85b54a9d9df89f6dcdb53da2db6949_JaffaCakes118
Files
-
5d85b54a9d9df89f6dcdb53da2db6949_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE