Static task
static1
Behavioral task
behavioral1
Sample
5d74f0bdf4381a2e89747b11cb202bf8_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
5d74f0bdf4381a2e89747b11cb202bf8_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5d74f0bdf4381a2e89747b11cb202bf8_JaffaCakes118
-
Size
88KB
-
MD5
5d74f0bdf4381a2e89747b11cb202bf8
-
SHA1
6af720d1a0dc1c91ce2d50f74b37762097444059
-
SHA256
a4168f9259b516afa6eb7b052316a54602f6ad754ca6b9f29774790cc28c9a07
-
SHA512
65fc5e724cc7e3c1cd08a8220006477873f2deafbd04408c688c0986db3d1c7e3de2a18fabec9907f0140c0ef6ef1cad61c54c7985d52e2306f7e967ba45671d
-
SSDEEP
768:xg3+1NIlezZEatuHqLPkhEryY5USTMSuHcj19lmVWUE2q7NRbCxX5HoL3/QZZHwq:xu+1N9ZmhtYhUKLPyQH2xEAAwT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5d74f0bdf4381a2e89747b11cb202bf8_JaffaCakes118
Files
-
5d74f0bdf4381a2e89747b11cb202bf8_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
�S=`� _� Size: - Virtual size: 376KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
E��<�� Size: 20KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 67KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE