Static task
static1
Behavioral task
behavioral1
Sample
5f13def43e34bf8a577f02b6fae74660_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
5f13def43e34bf8a577f02b6fae74660_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5f13def43e34bf8a577f02b6fae74660_JaffaCakes118
-
Size
369KB
-
MD5
5f13def43e34bf8a577f02b6fae74660
-
SHA1
e5bdff5f8c863dcd11362bb7a4778b1077563a04
-
SHA256
af08bbda08b30e3ddf977a6cf4e10c0b8e56ebd47401ca8c158ceadde6291b29
-
SHA512
150f16a40e2cabc40f73bdee7b68b20ced87aa8fcadfab567bfd33c6a13472d03408e1cf77299e3f067cd3f099fd473dacf89043104210fd1db77a84374384c5
-
SSDEEP
6144:T958H/lb1BjZ0reQhFjz7e2WwhDST1a6ghYiUBoom8c04aUMqQBDGrpc1rj0VgL/:T958H9ZhmrRhF/y2WwtSZa6mhoLc0rWm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5f13def43e34bf8a577f02b6fae74660_JaffaCakes118
Files
-
5f13def43e34bf8a577f02b6fae74660_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.text Size: 339KB - Virtual size: 816KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE