Static task
static1
Behavioral task
behavioral1
Sample
b5d5a53f0481447bae0936847b4ececd_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
b5d5a53f0481447bae0936847b4ececd_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b5d5a53f0481447bae0936847b4ececd_JaffaCakes118
-
Size
730KB
-
MD5
b5d5a53f0481447bae0936847b4ececd
-
SHA1
d5f0be7fb624f008b721099eb0ba4c7af7388d73
-
SHA256
e71d57867a68478924cd6f4eeef338161731c9177e9c46474c976d754a856618
-
SHA512
e340ca2b13353830be504de601238325d54c41ce0ddecd09b4e55ced1cd322a05da7d08bcb24c3b168001bec1b7a38057c5e7666a67ddc1f3bf671b3832000f6
-
SSDEEP
12288:MuPduXkj87jJKGqCdD04Q5TQcXTtBR3u4GKh1ru41Hhz2VCRf:MKQUwZ1fDSCcz5DF1rughzxf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b5d5a53f0481447bae0936847b4ececd_JaffaCakes118
Files
-
b5d5a53f0481447bae0936847b4ececd_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 743KB - Virtual size: 743KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 5KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 16B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 55KB - Virtual size: 54KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 117KB - Virtual size: 117KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ