Static task
static1
Behavioral task
behavioral1
Sample
5f721c5c17bebe4d5bf16bb873fbd426_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5f721c5c17bebe4d5bf16bb873fbd426_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5f721c5c17bebe4d5bf16bb873fbd426_JaffaCakes118
-
Size
233KB
-
MD5
5f721c5c17bebe4d5bf16bb873fbd426
-
SHA1
f1adfcee378c799562bd55cc952c7600f5236fe2
-
SHA256
8ded41fd6f54582f4796fcc2551d17ae1fb1c0ce8069020caef87fe7639c9d3d
-
SHA512
4f6bb7873631cab16af3f9cbdc8b758e1aa8b53fea10f80174eabf5d6bf4215c65ff35e779004de69dbbcbf5bd05f46d0a8c9551c966d1b4d35e63fbc3a42438
-
SSDEEP
6144:nj4CEQeid8f98gWNlPTGQQm6agrdWRacDajI:jei8eNtTirdWoc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5f721c5c17bebe4d5bf16bb873fbd426_JaffaCakes118
Files
-
5f721c5c17bebe4d5bf16bb873fbd426_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 39KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 11KB - Virtual size: 412KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 177KB - Virtual size: 180KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE