Static task
static1
Behavioral task
behavioral1
Sample
5efb13458bced6608b75796c348db937_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5efb13458bced6608b75796c348db937_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5efb13458bced6608b75796c348db937_JaffaCakes118
-
Size
197KB
-
MD5
5efb13458bced6608b75796c348db937
-
SHA1
69b374394df47de5c67275cdd1eeb30c56e7bdff
-
SHA256
200fc406bc412862821033380b218d5919c370a2f0e7f331478d34d9500b70f4
-
SHA512
3ced543be6077beceaa7bd6b2cb9fcc2557aacea89ec9eb8e669467b3f15394894b299f92c972546d9812bc2aed4426e74d5ca98682665968b9d098600054829
-
SSDEEP
3072:JnJ0V9X3g6gNWUudQetnUotgLluRFgyW8KMax8GD68PQenM1Q3Yf6h0qdjqXt6y:VJkpQcQAnlyLUWkaxx68PQWMr6Cq6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5efb13458bced6608b75796c348db937_JaffaCakes118
Files
-
5efb13458bced6608b75796c348db937_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 183KB - Virtual size: 182KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 2KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ