Static task
static1
Behavioral task
behavioral1
Sample
5da4db13981b939cff34d1760438e1da_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
5da4db13981b939cff34d1760438e1da_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5da4db13981b939cff34d1760438e1da_JaffaCakes118
-
Size
56KB
-
MD5
5da4db13981b939cff34d1760438e1da
-
SHA1
b831c1030e7d26d9dcbbe7933e3ea56e208ca488
-
SHA256
ca58785587dcb9403a9dae9c7a42340b23af4af7e2815152ff6ce130f273ceca
-
SHA512
b110292d50acd2d6b0e8e2793e65ca16007476a108c1711fe25106e66699903f990aab6502b490639f7c8f8f5ed7fa42164bd29f2563d5bf146e98d90ed2ca69
-
SSDEEP
768:6zWWAi9IHHXcN6/Ld2NR9VE+U9teYeb3DuYcWgq5B2PPVoDBiDe46gaI3b6HJPgn:oN4AjNby+ncWgM2PPGcDj5bmxs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5da4db13981b939cff34d1760438e1da_JaffaCakes118
Files
-
5da4db13981b939cff34d1760438e1da_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 96KB - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 132KB - Virtual size: 152KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE