Static task
static1
Behavioral task
behavioral1
Sample
5e4b5d4b34c1c2285ac3b716c9ac9bcb_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5e4b5d4b34c1c2285ac3b716c9ac9bcb_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5e4b5d4b34c1c2285ac3b716c9ac9bcb_JaffaCakes118
-
Size
116KB
-
MD5
5e4b5d4b34c1c2285ac3b716c9ac9bcb
-
SHA1
08da8d628d005c2f68db7af6b1e3e76a2ddd03c9
-
SHA256
dfae81939b4603aaf50422b682ee798d154002f147356c9b1cf140b68c3a666a
-
SHA512
0eab5e877c9919f7b410d91e7bd2972f008377dde534da1c2b54046e87f76626ec4afc2b3539dbbfb19d8342801d40864ad19f4b7869ce67f12f9272fb4f660b
-
SSDEEP
3072:OaBaz8jkhQW0/nyypj35BOZpJH5puOjrBwTgkXH7BViJ:OaBe8jkhT01dBOrtXxKXbBAJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5e4b5d4b34c1c2285ac3b716c9ac9bcb_JaffaCakes118
Files
-
5e4b5d4b34c1c2285ac3b716c9ac9bcb_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 21KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 65KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE