Static task
static1
Behavioral task
behavioral1
Sample
5e4f905a2de5b1eed8d3168666551320_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
5e4f905a2de5b1eed8d3168666551320_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5e4f905a2de5b1eed8d3168666551320_JaffaCakes118
-
Size
2.0MB
-
MD5
5e4f905a2de5b1eed8d3168666551320
-
SHA1
9b265e415bfa7f0511f9ed36b1ce5f7ec43e5ae9
-
SHA256
1d9b2d70a005b07146b347ff0cb991d46d43682047c4d643f84767763bbbb531
-
SHA512
497b41b13f0d3375c488b5ee14f558e5ba7079a894d7fd1e05095c366d2b70c97a70d3239627c75aa41b6c075f1b3e421813581b9d32d2cad6b1449d0d869863
-
SSDEEP
49152:rg52pgdGCZYW0mhclptjYIlZKCV737zQhoYCUA:7jCr0vptP5V7fQqYC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5e4f905a2de5b1eed8d3168666551320_JaffaCakes118
Files
-
5e4f905a2de5b1eed8d3168666551320_JaffaCakes118.exe windows:5 windows x86 arch:x86
fa51f1ce880f64183a971eef7bdd0ae6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ole32 winmm
CoRegisterMessageFilter ��+
Sections
.text Size: 1.3MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
SE Size: 656KB - Virtual size: 656KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
SE Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
SE Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
SE Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ