Static task
static1
Behavioral task
behavioral1
Sample
5e5ed4f35533f6d2e7d8ef84ea5f2d64_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
5e5ed4f35533f6d2e7d8ef84ea5f2d64_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5e5ed4f35533f6d2e7d8ef84ea5f2d64_JaffaCakes118
-
Size
52KB
-
MD5
5e5ed4f35533f6d2e7d8ef84ea5f2d64
-
SHA1
d6889c7e7218764a1de0a8590e6617ea50238b7a
-
SHA256
3f2050f11471e05ce857901b6d53a2e5e5307fda3959c32f85a23c4ed562cdaf
-
SHA512
80f49f1cbaf4ef177d06bb00008d958491985ba47bef53c9df17c2bf0b11e5fa48e22a19be68ac26b69f35ab7e27b05f9207f6fb7b088dd82324423f4e4584f4
-
SSDEEP
768:IRVNq/9pkEAj2KMWj6kOzeQ5wdSqkLS/Kk6zfwLaoWr/5SIKTXJfSkzWT:ILNq/8ECJj6kZSAHRIMXRZy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5e5ed4f35533f6d2e7d8ef84ea5f2d64_JaffaCakes118
Files
-
5e5ed4f35533f6d2e7d8ef84ea5f2d64_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_AGGRESIVE_WS_TRIM
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 33KB - Virtual size: 33KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 1024B - Virtual size: 996B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 1KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ