Static task
static1
Behavioral task
behavioral1
Sample
b5a501dca2c5303089b4857ffb38f3ca_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b5a501dca2c5303089b4857ffb38f3ca_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b5a501dca2c5303089b4857ffb38f3ca_JaffaCakes118
-
Size
171KB
-
MD5
b5a501dca2c5303089b4857ffb38f3ca
-
SHA1
83fbb066edb207fcbb580d14b8cc6f74e5d79b31
-
SHA256
4187800d9f894bf949141e6ed33f184e1511eb9950ffb0537e40067770191a2c
-
SHA512
e7c8b9b2a42e3780ab4d04a7912e7f89133cc9935c52c1b7461d86cdc3f7d9a7c3293274e020bc2abb1f75ce85405df64200eaf8c3b17b0236807092fccffdcf
-
SSDEEP
3072:psKFkFU3oPOxFHOXEzf0RZkQ5MiR2lAcA9Pnf2u8O3XBgIo:D0POx6E21yiR29M7fZo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b5a501dca2c5303089b4857ffb38f3ca_JaffaCakes118
Files
-
b5a501dca2c5303089b4857ffb38f3ca_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 166KB - Virtual size: 168KB
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 4KB
IMAGE_SCN_MEM_WRITE
Size: 1KB - Virtual size: 1.4MB
IMAGE_SCN_MEM_WRITE
Size: 257B - Virtual size: 257B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE