Static task
static1
Behavioral task
behavioral1
Sample
d5a5845a3fd09d57fe9e1f6f6a976fe2_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d5a5845a3fd09d57fe9e1f6f6a976fe2_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d5a5845a3fd09d57fe9e1f6f6a976fe2_JaffaCakes118
-
Size
3.2MB
-
MD5
d5a5845a3fd09d57fe9e1f6f6a976fe2
-
SHA1
14ec4c987d786bcc3bdefc1075dae2240fd3bc62
-
SHA256
9283d70634c16ccae86efa5a5c5c680433f8fa19cece3a11a30d24883f640552
-
SHA512
817fed955a1cc7649c8487ca728130cc46074c099421b886317b4ea10df84c21078a6d297f1156eb9c6e0ffebce55a8515b4d1af5a07221bb67dd7462edf19f6
-
SSDEEP
98304:8JxBGuuawT+8ILPc9QiNT5wEKoyom88rw0f:6xBGx7T+8Ei1KZJl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d5a5845a3fd09d57fe9e1f6f6a976fe2_JaffaCakes118
Files
-
d5a5845a3fd09d57fe9e1f6f6a976fe2_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: - Virtual size: 5.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 3.2MB - Virtual size: 3.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE