Static task
static1
Behavioral task
behavioral1
Sample
5eb5adf9a8a499090e0a8dc700d8ee5e_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
5eb5adf9a8a499090e0a8dc700d8ee5e_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5eb5adf9a8a499090e0a8dc700d8ee5e_JaffaCakes118
-
Size
273KB
-
MD5
5eb5adf9a8a499090e0a8dc700d8ee5e
-
SHA1
7f053690179a17c883d1e26ae8158fee230a66cf
-
SHA256
3ba634cdaa7d93e1c7454b70a2fbca50ab69911c791da5b0c3e93f8f6ea0a468
-
SHA512
1f0adda4f23b85bffab22807dd1b4e76b5c5b4ea24b91818cf55a31f4e1d78e1e325601641fe9adc2402856a7c6a90fa52a4e7d69d88a338e431e9cdac960714
-
SSDEEP
6144:CFLtd4LryXcVCVVxWT2XJw5ppPMoCEshiYhiyGTq0axyah3MUCMFRE3mlm:uj4L+sIVVUTsa5paPiYhGTqfxhCuRE3l
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5eb5adf9a8a499090e0a8dc700d8ee5e_JaffaCakes118
Files
-
5eb5adf9a8a499090e0a8dc700d8ee5e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
WinLice0 Size: - Virtual size: 812KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
WinLice1 Size: 272KB - Virtual size: 279KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE