Static task
static1
Behavioral task
behavioral1
Sample
5fafe4d4447bd1672c6801d3d14a8109_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
5fafe4d4447bd1672c6801d3d14a8109_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5fafe4d4447bd1672c6801d3d14a8109_JaffaCakes118
-
Size
472KB
-
MD5
5fafe4d4447bd1672c6801d3d14a8109
-
SHA1
f39435b342f814e24404bfedbfdf90792dbeaa1a
-
SHA256
085f048d1ef3bd4f9bf6cf1c3c945ea23f78c897eb1d170fb35a29a3c716f558
-
SHA512
ee0938a65196439fd1d91c5063983f559952530b8e35a015235d1ca17c1bdef09dcbff2d444964151cfdcf10092416d35d22387c4de96051416b0f75cfc66537
-
SSDEEP
12288:K7jcj80xK32lG2tmuU6ytNvkWiZBtUdQVoS:LjlE3qGwmJ6ytNva
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5fafe4d4447bd1672c6801d3d14a8109_JaffaCakes118
Files
-
5fafe4d4447bd1672c6801d3d14a8109_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: - Virtual size: 412KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 384KB - Virtual size: 388KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 87KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE