Static task
static1
Behavioral task
behavioral1
Sample
5db7bd97ad288417726fc4804762b304_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5db7bd97ad288417726fc4804762b304_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5db7bd97ad288417726fc4804762b304_JaffaCakes118
-
Size
413KB
-
MD5
5db7bd97ad288417726fc4804762b304
-
SHA1
8097081ae12068c547e180a7bea86d9658885376
-
SHA256
8ddc3320714d3f6e617baa4c0a68a28b9acc23d6f30c4ac450cdc4c525527e5a
-
SHA512
183ef733141ed56bd4727a32fc63d48e6cb30a981371fb60a87ee853f9da35139754f223257247ecfc1b40ce2d4adfd194b348ebe784a0d516e0eeabf6ef47d3
-
SSDEEP
12288:+kWcNmzD6EoMqq6xGJOpqszKd0ks6tpyB:fNDMz0GkprWs6tpyB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5db7bd97ad288417726fc4804762b304_JaffaCakes118
Files
-
5db7bd97ad288417726fc4804762b304_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 87KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 19KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 3KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 301KB - Virtual size: 304KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE