Static task
static1
Behavioral task
behavioral1
Sample
5e9905dcdb5b21d5ccf332e6e8131685_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
5e9905dcdb5b21d5ccf332e6e8131685_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5e9905dcdb5b21d5ccf332e6e8131685_JaffaCakes118
-
Size
13KB
-
MD5
5e9905dcdb5b21d5ccf332e6e8131685
-
SHA1
3d5b087fb42345dbbb4878252f9aba8ca8c8cf7c
-
SHA256
f702c8548da5a3a7735b1ecc815733cb7b22c9486557a045d036ac7e12e81691
-
SHA512
b7951212b57570c1ee25c1c99c9ec906a45d78e74d896684ef253bc02b6dae128935d042f39e3edcf5d325cc4346cdd1036e7df80c3f19ce0bbfdbbafb209229
-
SSDEEP
96:Yl9VWculkDA+Vgw1CNsy3QJt0E0V9/JViJyOLsyJ5RpRnp8zJs6LC/GmvHSvsT1o:FuDAMv8NxgQEeh67xfRJ8LEGYYei
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5e9905dcdb5b21d5ccf332e6e8131685_JaffaCakes118
Files
-
5e9905dcdb5b21d5ccf332e6e8131685_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 28KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ