Static task
static1
Behavioral task
behavioral1
Sample
5d7f508e5a637399214d4f4da8e61828_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
5d7f508e5a637399214d4f4da8e61828_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5d7f508e5a637399214d4f4da8e61828_JaffaCakes118
-
Size
56KB
-
MD5
5d7f508e5a637399214d4f4da8e61828
-
SHA1
815dca5dafbdf1bac21c3fecb0f107674c3c0f64
-
SHA256
4f644d6724d32b1f3e2e9ec8a1cfd9a53a352f2d4d436d4bbf7f689f73559291
-
SHA512
8d6a512c72b40302f729cc6efb970ee95142ab7ed631bb94475aaa49454c08ec7012d649e1709e10ce556a44c783548229768da1fbbdc1b23aaa307cc09ff710
-
SSDEEP
768:N9txDD3sgTeBsK26R0FXpl079p28MUqn2yHEM0S6H:3X3pTIs7Zc32TN2yHa7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5d7f508e5a637399214d4f4da8e61828_JaffaCakes118
Files
-
5d7f508e5a637399214d4f4da8e61828_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
555 Size: 1024B - Virtual size: 832B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
333 Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
222 Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
111 Size: 13KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
444 Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 256B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE