Static task
static1
Behavioral task
behavioral1
Sample
5e8bd40a2dec0760ca20747e41d8ddfd_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
5e8bd40a2dec0760ca20747e41d8ddfd_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5e8bd40a2dec0760ca20747e41d8ddfd_JaffaCakes118
-
Size
143KB
-
MD5
5e8bd40a2dec0760ca20747e41d8ddfd
-
SHA1
07b07848c1ec376b2b7bf559102f83c5833148b4
-
SHA256
932f2ae29e7a13411326afe9ce37c2a58cb5e25e7de7964fdb56367f5bd438f9
-
SHA512
a1d5b2424b5f94329fad0423df158b00129efb7f0cb8f844cd3852e990ecb237d3c278ecb36598a043005e692800e8a19d4993038b1da713fe0bcd4c6a88161d
-
SSDEEP
3072:djrSBVk+/GBWnj9k2+plWzW1DM++xHhAmG:IBV8snjR+pjDM++xHhAx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5e8bd40a2dec0760ca20747e41d8ddfd_JaffaCakes118
Files
-
5e8bd40a2dec0760ca20747e41d8ddfd_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 113KB - Virtual size: 116KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 18KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ