Static task
static1
Behavioral task
behavioral1
Sample
5f03cf94edfaec1c8cf8fb46c1dc2eb5_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5f03cf94edfaec1c8cf8fb46c1dc2eb5_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5f03cf94edfaec1c8cf8fb46c1dc2eb5_JaffaCakes118
-
Size
313KB
-
MD5
5f03cf94edfaec1c8cf8fb46c1dc2eb5
-
SHA1
85db8a831ebfd7619710ec2cfbdefd8e64774558
-
SHA256
85b666e2f604d5e7ee2feb193b43bcf054f8fc327766a2a954c9a1f0b6b7ff49
-
SHA512
2594786d308308c103a082d4d0680da3688045a496c2c1be7fe080f336f91f08382469d88b60dbabfe3ed35814f5c28d9be39d10deeb8a65c29e650ad985e0e3
-
SSDEEP
6144:mYOdaZFWoEOeBZBZImY4tQpz+MU8PUro9D2VgK7T8uGphdWo6ZBUwGaM:m3daZvEPBZEl4tMBUXoYyKX8BdWZZB/8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5f03cf94edfaec1c8cf8fb46c1dc2eb5_JaffaCakes118
Files
-
5f03cf94edfaec1c8cf8fb46c1dc2eb5_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 289KB - Virtual size: 288KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ