Static task
static1
Behavioral task
behavioral1
Sample
5ebfe5332771bcaa845a9bab0f391ef6_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5ebfe5332771bcaa845a9bab0f391ef6_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5ebfe5332771bcaa845a9bab0f391ef6_JaffaCakes118
-
Size
43KB
-
MD5
5ebfe5332771bcaa845a9bab0f391ef6
-
SHA1
86bda0091b0a8a78876ba2c312f3f11363342e25
-
SHA256
a07164b2b150c2e836c3505e0dc274959cb3a897017cd1f113e34ee6f20c2ff0
-
SHA512
043056991313597ab09c6faf69cd1e3e8afdf9c2db446f0017b51a5dac027d8a774c3794a03001008f1163d59b1e788747b146ccb6b5c3289e93fdbf448df3dd
-
SSDEEP
768:Wol8HtGKcHZSt3Z7TB1W9pCJlNutcIf9GoBmRdbUJ6/jx1PhZYRz:WAHZSt3Zjy4IttUfb5jfZZY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5ebfe5332771bcaa845a9bab0f391ef6_JaffaCakes118
Files
-
5ebfe5332771bcaa845a9bab0f391ef6_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 35KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ