Static task
static1
Behavioral task
behavioral1
Sample
5d64ab0de0c6177db71b41fe17453a7a_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5d64ab0de0c6177db71b41fe17453a7a_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5d64ab0de0c6177db71b41fe17453a7a_JaffaCakes118
-
Size
288KB
-
MD5
5d64ab0de0c6177db71b41fe17453a7a
-
SHA1
0aa97b7eaff0e74747f27d8fb9d57bd6b2df4cee
-
SHA256
5ca5b0109cb28b6054f17f6192df9ef363db7aeea40264aa81cc206d70f0f84d
-
SHA512
01b4e051fb39b92d26ea6d7985c0fd07617cd401439285fb26b055e474209ab739d3d6f5343dc044e4f3286c8bb690b13f4309864099dbe1649bd9944323aa9e
-
SSDEEP
3072:y7b96hik4mpDXB+NdydIc1eY+yzy84U3EH+xIuKXI+4LCr7XVgCi20:y74ik4A+Ndydj1eY+yzyNre6uAId00
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5d64ab0de0c6177db71b41fe17453a7a_JaffaCakes118
Files
-
5d64ab0de0c6177db71b41fe17453a7a_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.Z3G3E Size: 2KB - Virtual size: 120KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.evn Size: 106KB - Virtual size: 108KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.DSr Size: - Virtual size: 8KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.mtug2a Size: 119KB - Virtual size: 120KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
fxqnzww Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tevn Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE