Static task
static1
Behavioral task
behavioral1
Sample
5f61978eaf745217c625ff6009bca673_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5f61978eaf745217c625ff6009bca673_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
5f61978eaf745217c625ff6009bca673_JaffaCakes118
-
Size
19KB
-
MD5
5f61978eaf745217c625ff6009bca673
-
SHA1
f4ed83d4a09a1325b3e8cfbedc18d61b5950b6f0
-
SHA256
615c5555416f953c360cc1a668c7bc7e5e17c6b9e58c26acae5d3ab48fcdef2d
-
SHA512
db940c2af6bdcddcff42ea01564203053781120592420150d3e48ee1537c67d2974719d9df7c71e9966b66357519bff3488d0e8e1a4412841c16ba65f4815eb0
-
SSDEEP
384:HRxcZ0oM56lnRrpbf0/A6wQJB5j11nlqJ1MxU2q5vEoHdALc6c2mmujF32jTI7Uw:xxcZfMIjQIuJB5tqFvnHdAAVQI7AWpkq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5f61978eaf745217c625ff6009bca673_JaffaCakes118
Files
-
5f61978eaf745217c625ff6009bca673_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.stalin Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
RCryptor Size: 63B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ