Static task
static1
Behavioral task
behavioral1
Sample
5e63b4492e7436a6ebcd20905fabb91b_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5e63b4492e7436a6ebcd20905fabb91b_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5e63b4492e7436a6ebcd20905fabb91b_JaffaCakes118
-
Size
209KB
-
MD5
5e63b4492e7436a6ebcd20905fabb91b
-
SHA1
f65b9cb010ef76d3f1a5302b46123b8c0a420d8c
-
SHA256
b2b2da294f5fcc278744d30799fbe70f6e04c28273126b0cbbc455a2397155a7
-
SHA512
b352f1d001ba7a312ce8bdaff544d0d0b584a8ad0464887052662ea885a363baff10b8c3852354ca3bba200538b9b1d993ccfcadc26b95b52e1091a71c56dad5
-
SSDEEP
6144:vDXy7yaXpggQQB3EiYXY0ay51NySj+riSwd:DgXpgAlgo0aC1I++
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5e63b4492e7436a6ebcd20905fabb91b_JaffaCakes118
Files
-
5e63b4492e7436a6ebcd20905fabb91b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.code Size: 95KB - Virtual size: 95KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 99KB - Virtual size: 99KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE