Static task
static1
Behavioral task
behavioral1
Sample
5da9eeb1cb17a24aa49469345537b6a0_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5da9eeb1cb17a24aa49469345537b6a0_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5da9eeb1cb17a24aa49469345537b6a0_JaffaCakes118
-
Size
13KB
-
MD5
5da9eeb1cb17a24aa49469345537b6a0
-
SHA1
33d3b1d5281ef986553676ba05086b72101d6c04
-
SHA256
73077c274109aaf9a8836d337961694f54886597886751ed0e19fe6ee6213aec
-
SHA512
f119abe8be41a60181de44b94eaf8168fc2ad495e53149bf57b40a091d3a7b4c6bb3792936024409bcd47f9af0570d2dbd1a93bc845a0f67ce1fb8728526526f
-
SSDEEP
192:S6qr7JA7plrKaCA54kp5p6bY93MbObfknlydJuY5xqa2cMVpW093CsLkaaCkcFva:GO7DWA54E5wbNObM4OY5x5GCsLklka
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5da9eeb1cb17a24aa49469345537b6a0_JaffaCakes118
Files
-
5da9eeb1cb17a24aa49469345537b6a0_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 355KB - Virtual size: 354KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 47KB - Virtual size: 47KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 55KB - Virtual size: 78KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ