Static task
static1
Behavioral task
behavioral1
Sample
5fefe9d3e949b620c2a2ed86b4de37f9_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5fefe9d3e949b620c2a2ed86b4de37f9_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5fefe9d3e949b620c2a2ed86b4de37f9_JaffaCakes118
-
Size
122KB
-
MD5
5fefe9d3e949b620c2a2ed86b4de37f9
-
SHA1
98883633c7fac5d85fac219ec005e508470698c1
-
SHA256
9e59783dbc5fbe4fc2931f8136af6e6f48d053fdea54e5f421291e80cd966ae4
-
SHA512
8b57f983524e3f2ef42b5d0ae12023438d3c92c99c3161bce3b16328dc5867d4c869d4c4055f461bbe919cd664385d81574d9201a0db5616e939a9eb759dd2a8
-
SSDEEP
3072:W1VNvsKHpYFsLp1ZGsEK2prkA/Ma0M1e4+9Ff4e:WRkKaMp1ZGu2sC1e4eFb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5fefe9d3e949b620c2a2ed86b4de37f9_JaffaCakes118
Files
-
5fefe9d3e949b620c2a2ed86b4de37f9_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.gzv7tm Size: 1KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: - Virtual size: 3.0MB
.rbss Size: - Virtual size: 444KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 118KB - Virtual size: 120KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE