Static task
static1
Behavioral task
behavioral1
Sample
5e5a4082c655832e6c16421e50606175_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5e5a4082c655832e6c16421e50606175_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5e5a4082c655832e6c16421e50606175_JaffaCakes118
-
Size
374KB
-
MD5
5e5a4082c655832e6c16421e50606175
-
SHA1
f4a0118d44f5901f4a5fee558245ca98fbcdff2a
-
SHA256
b7f5d8e14f51e5c2f17e26b7e853e2f5e2957e0a661fbb5130fc4d826705cf5a
-
SHA512
9ee99923cbcc85df280de215dae9abcfc9cbd821f6183e9b01bb24f31272d554db3f3edbeb369f8f1c20310966a28c8ac48905e482a94aea52d840eb7e3984e5
-
SSDEEP
6144:gPACnEwfg8UnHJ4mq26VYWK9tgach5q9Vy581lwK5ahewsWPKXE9+x/ryQGEPqRC:gY8fg8UnpJ6VYB9t1i5q9s5Ie3smkEcb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5e5a4082c655832e6c16421e50606175_JaffaCakes118
Files
-
5e5a4082c655832e6c16421e50606175_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: - Virtual size: 516KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 374KB - Virtual size: 376KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE