Static task
static1
Behavioral task
behavioral1
Sample
5d78b8c6d041b87bf22540c3b3523b39_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5d78b8c6d041b87bf22540c3b3523b39_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5d78b8c6d041b87bf22540c3b3523b39_JaffaCakes118
-
Size
681KB
-
MD5
5d78b8c6d041b87bf22540c3b3523b39
-
SHA1
b58cb35fbe40ef9258d45e108dc9e717232d5cc0
-
SHA256
a987fcfbb02e4ead8d6d3b6c99b9f1e8170d535e183ddd9300e937afdf9544b1
-
SHA512
6b479c541774109c7a2a5396297e01cf80679efb18a65a1d4f5271ab720d03945a9b5cc5b1d919fb6522945e278c54c50d73f64e9442b8e8c9a61145c8c5d84a
-
SSDEEP
12288:CG0ObNwOHlcmCNxY+Y1GJfRyl84190bHkzUwQ6b7MP+Dd2E9Akr:CyFcmYY1GJJyBcH0U67MP+h22D
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5d78b8c6d041b87bf22540c3b3523b39_JaffaCakes118
Files
-
5d78b8c6d041b87bf22540c3b3523b39_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 233KB - Virtual size: 776KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 37KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 35KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 192KB - Virtual size: 196KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.1234567 Size: 178KB - Virtual size: 180KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE