Static task
static1
Behavioral task
behavioral1
Sample
5d7d48b7d42709a4315d484ecb1b276a_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
5d7d48b7d42709a4315d484ecb1b276a_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5d7d48b7d42709a4315d484ecb1b276a_JaffaCakes118
-
Size
136KB
-
MD5
5d7d48b7d42709a4315d484ecb1b276a
-
SHA1
f2d512adad28bf608791372c3e83b04b8fd4f8ee
-
SHA256
ecc9d1b306062f2ed1b3200642613244c2a5da5abee80e852002a99985b495ef
-
SHA512
7f50d385442d6231992071d8603738d58e6710e8f8c095156ff631eed293cf8937246d52d5fc3c90294c1e2a53cdab3305403f6a24748293c9b50cb2264589b7
-
SSDEEP
768:USNeRjrbeMfIgtAKOxOldSJ92V5mCOCK+lldmJh:LN4/5Ig2KOxOldOfh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5d7d48b7d42709a4315d484ecb1b276a_JaffaCakes118
Files
-
5d7d48b7d42709a4315d484ecb1b276a_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 28KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ