Static task
static1
Behavioral task
behavioral1
Sample
5f6f524eea91658260cc8dadccbeaa4f_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5f6f524eea91658260cc8dadccbeaa4f_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5f6f524eea91658260cc8dadccbeaa4f_JaffaCakes118
-
Size
577KB
-
MD5
5f6f524eea91658260cc8dadccbeaa4f
-
SHA1
207ea1463f1ac22348abfa76177b91afbe09542c
-
SHA256
c7dfd5a55b24c540705f8932373306b86073c019b00f3805e29cb9e2be029091
-
SHA512
fce4b67bf3ed8807d1a8b844ab2239b1926dc8ce661015a920f5efe2df5f16687221b11fe37274ccc16c1c0b5c3bfce782bc3449d08f4ee3e4065e426e3befe9
-
SSDEEP
12288:q/VXKZSJwMnFy+AG2h/Hg7PAIQjV3Ha52UnC5jsgGYBxVD3z/40Gi8DSNMtid:KKZSJwcFy+AGqvgLApV3Ha52UnC5jsg3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5f6f524eea91658260cc8dadccbeaa4f_JaffaCakes118
Files
-
5f6f524eea91658260cc8dadccbeaa4f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 12KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rhkv Size: 560KB - Virtual size: 560KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE