Static task
static1
Behavioral task
behavioral1
Sample
5e7758ddc8c3dee2c7b8a122cec7df58_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
5e7758ddc8c3dee2c7b8a122cec7df58_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5e7758ddc8c3dee2c7b8a122cec7df58_JaffaCakes118
-
Size
94KB
-
MD5
5e7758ddc8c3dee2c7b8a122cec7df58
-
SHA1
eb428a200a74e32d1978944a49f897f20bb547b9
-
SHA256
37cbc4af96b09c624ced6e7133a69d85b2d228f673b03b9e494ace57bbf84d8f
-
SHA512
bb6c7903daa5e3a66a45e384e9187d3a4b9d0ff7d1d9f5609b330997e72e8ff93d143348ff3590304a245bdb5b9f5e085ec841d4e717e5d5ac2f39ae63691d4c
-
SSDEEP
1536:yYMxu7ajj7ntosV7hk0Erc+ke9kmrkGuicPo2AHi10li65zT7zoQKv/lFN:yHxgaPbtP7hxEfFoGncAHi1KTvo/lFN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5e7758ddc8c3dee2c7b8a122cec7df58_JaffaCakes118
Files
-
5e7758ddc8c3dee2c7b8a122cec7df58_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 76KB - Virtual size: 53KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ