Static task
static1
Behavioral task
behavioral1
Sample
5edf4ab97084dc789d9f8c4abd456f1e_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5edf4ab97084dc789d9f8c4abd456f1e_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5edf4ab97084dc789d9f8c4abd456f1e_JaffaCakes118
-
Size
75KB
-
MD5
5edf4ab97084dc789d9f8c4abd456f1e
-
SHA1
4591a23fdb1a5f8926dd7e316443d5918c0ed128
-
SHA256
a1a642e3a1e78d7b46081b4a629ac178de8df69b6f4bf8f7619a700eb4357848
-
SHA512
96617c436e735f24ae989779945dad3a9a00f8ee4c856f7613d3750feed53dd2f4bbcdce89e67c23d4ee4a0bf4c14549bbfd2b9ff57620bd888bc6ccac6c9926
-
SSDEEP
1536:jVqnqapNfRH4ZSeaVKah/KcbKh/ccMpJ1zOVTmc/uINrMnouy8H:j/scSeaVx/KcK/czLO9mcuINQoutH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5edf4ab97084dc789d9f8c4abd456f1e_JaffaCakes118
Files
-
5edf4ab97084dc789d9f8c4abd456f1e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
qxmx Size: - Virtual size: 260KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
hvic Size: 73KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE