Static task
static1
Behavioral task
behavioral1
Sample
5ee173cb0f9db4c8d1ff185e8d4f9f9b_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5ee173cb0f9db4c8d1ff185e8d4f9f9b_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
5ee173cb0f9db4c8d1ff185e8d4f9f9b_JaffaCakes118
-
Size
83KB
-
MD5
5ee173cb0f9db4c8d1ff185e8d4f9f9b
-
SHA1
6a3ffaace3efd90deafb02656d6f3e8a1dcfc063
-
SHA256
5bcc1aa30c056a82be3d766b5c2f7d878cf412a6200530d95969d9564dd4a819
-
SHA512
6c6ab45cf88078cdc96e5870d6237f478619591058ca57656eda4299096e90792d7481ed004cf8d744e6d6138f85d12fdc4d0720cfae31c1b61736473a71b504
-
SSDEEP
1536:I7Dwfy7c1u/0pYvO7Koinj7b1/UpcweODom4piyUo/FV2:I7Dwfy7n/eYvogjfeGnOBUiy/FV2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5ee173cb0f9db4c8d1ff185e8d4f9f9b_JaffaCakes118
Files
-
5ee173cb0f9db4c8d1ff185e8d4f9f9b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.hcn Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE