Static task
static1
Behavioral task
behavioral1
Sample
ac5be5957c159b3b9204d1ef6e677fd5_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
ac5be5957c159b3b9204d1ef6e677fd5_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ac5be5957c159b3b9204d1ef6e677fd5_JaffaCakes118
-
Size
21KB
-
MD5
ac5be5957c159b3b9204d1ef6e677fd5
-
SHA1
e84c5f433bdcc45b2c0140103ccec474bfb11de6
-
SHA256
2d21f2f285d1a6757a17b785b6ed3a8fca6bade8a669c9571fbb49185a8b5f28
-
SHA512
dd965b97f778f5fe45100361101fcc7cb17002d8173f71c2bcd1a3de2e359307c35ae8da2fab065e0f5d47e0ffbaac3c965e0cc8d7fa0726687285683fc24bdd
-
SSDEEP
384:srzmx3hxB6aES1FGRKzj6HmzYTX74+cG9B00o9ohTV6nPJbko+mksgR9Q:C2RbEqt26jw4h0sg9Q
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ac5be5957c159b3b9204d1ef6e677fd5_JaffaCakes118
Files
-
ac5be5957c159b3b9204d1ef6e677fd5_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 1.2MB - Virtual size: 5.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE