Static task
static1
Behavioral task
behavioral1
Sample
b5efbedc477814a086a2ff8a001df5cc_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b5efbedc477814a086a2ff8a001df5cc_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b5efbedc477814a086a2ff8a001df5cc_JaffaCakes118
-
Size
1.8MB
-
MD5
b5efbedc477814a086a2ff8a001df5cc
-
SHA1
886b5acc050141d145f2a5f05d124f46f5c82f12
-
SHA256
d8be630fd786cac871770e99878536d0a301ba2df75b9a85b0bea9c273dab8b5
-
SHA512
53055b21e84cd074a3185b805f585bf941b18b6c761b7eb01b1f15a6eab79aefe03f0a8cae1d7a5894b960737b281949d1d226a92e47af99466d83aca8b0d400
-
SSDEEP
49152:DF5i3pwNxoQJhYtb5CpwHxVQJhYtb5CpwHr:DF5opHQstb5CpcQstb5Cpe
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b5efbedc477814a086a2ff8a001df5cc_JaffaCakes118
Files
-
b5efbedc477814a086a2ff8a001df5cc_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 1.4MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 16KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 384KB - Virtual size: 384KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ