Static task
static1
Behavioral task
behavioral1
Sample
5f48dfd81425eed5369cd46e8c5aaed7_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
5f48dfd81425eed5369cd46e8c5aaed7_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5f48dfd81425eed5369cd46e8c5aaed7_JaffaCakes118
-
Size
301KB
-
MD5
5f48dfd81425eed5369cd46e8c5aaed7
-
SHA1
3ab6d05ea961868c7d1b9c0f58ee635c70278caf
-
SHA256
c1951039ebab5b7500cef8f21258ec3e7fe188985bdcee07bd9ccced75601196
-
SHA512
66d81a8cc5162e4ea91c91b1d403700d17462834533a06a4a4fd1bb33e92fd88417256e82aa5c642aaabb8106e4b2258fe7145b857be641d18a7656396044acd
-
SSDEEP
1536:UB4gVTzc4bKd0/kYiN93hUerMM/3xRZTo1zWDbu/w+4HH2:k4gW4bKO8YiiEC1zWH2w+2H2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5f48dfd81425eed5369cd46e8c5aaed7_JaffaCakes118
Files
-
5f48dfd81425eed5369cd46e8c5aaed7_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 1KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 96KB - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
ussv Size: - Virtual size: 137B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.sdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE