Static task
static1
Behavioral task
behavioral1
Sample
a5baac52c2bba192ebb2b7baeb8c7292_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
a5baac52c2bba192ebb2b7baeb8c7292_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a5baac52c2bba192ebb2b7baeb8c7292_JaffaCakes118
-
Size
502KB
-
MD5
a5baac52c2bba192ebb2b7baeb8c7292
-
SHA1
d4db65e71c73eea785640521d14be586961c5b29
-
SHA256
d603cb121b8e37f66f7c7c77dc2891e13cb46c70b8bb8458db00bd623058444c
-
SHA512
b9e4a39f92e25141fc594397970c8c5003053cc35cd24b5790692ba2d40b262bc08d0789741a7ddd692ec7226ee0575d988491475c686d2c6674438816f55c2d
-
SSDEEP
12288:YZwWFzRLsCB0OORoMKfTzoPuKG4GN3z59LTtXQRLy:YZwKzRMuMOoGX4I//VQo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a5baac52c2bba192ebb2b7baeb8c7292_JaffaCakes118
Files
-
a5baac52c2bba192ebb2b7baeb8c7292_JaffaCakes118.exe windows:0 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.j30hcu Size: 757B - Virtual size: 620KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.g4ttf1 Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.csr4la Size: - Virtual size: 5KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.045nrh Size: - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rmhhhw Size: - Virtual size: 20B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pgwqy4 Size: - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gpdxza Size: - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.x0ypod Size: - Virtual size: 132B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.m5ambz Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 495KB - Virtual size: 496KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 64B - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE