Static task
static1
Behavioral task
behavioral1
Sample
5e4861b95aa9f739961b2f376fb490b2_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
5e4861b95aa9f739961b2f376fb490b2_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
5e4861b95aa9f739961b2f376fb490b2_JaffaCakes118
-
Size
17KB
-
MD5
5e4861b95aa9f739961b2f376fb490b2
-
SHA1
06bd6f04c07242b961305750e04636429753faf5
-
SHA256
5fc5c64695ae97eaca52484835421745769926a80ba69cee689aab482646922f
-
SHA512
6121f1031e5eca32b2317b708a3ca979d13851d6267b601de6767451f445d5d949e634cd62f2222248ce656a1e118d9bad17e065b9d83fe6d7822a574d6d3a5b
-
SSDEEP
192:XbJdDV4Paqnz9tND2wFFFWOO4Tuu9kqB6EGqgNtGnyWOE+LArUpfuVFaNJhLkwch:HGx5V/jX91ny3O3aNJawcudoD7U4x9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5e4861b95aa9f739961b2f376fb490b2_JaffaCakes118
Files
-
5e4861b95aa9f739961b2f376fb490b2_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
CODE Size: - Virtual size: 36KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE