Static task
static1
Behavioral task
behavioral1
Sample
d5e6852db5a1c2d87a16af85b11d8a91_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d5e6852db5a1c2d87a16af85b11d8a91_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d5e6852db5a1c2d87a16af85b11d8a91_JaffaCakes118
-
Size
310KB
-
MD5
d5e6852db5a1c2d87a16af85b11d8a91
-
SHA1
40374445370234c255103cd56bac6fab9a3bcd5f
-
SHA256
1b4c806fd8943ba5783d1dd2a0adfb1d0e2f831000f7033cf91e3c1bc4de251a
-
SHA512
e1e3c3886d88b3172c6c95577ead4364cd8256634b4204b5c4e5c2edb1178bee5f3e7bab14c5ef286d31bc1f312e033f5a425420cb73711950c7f60a35b3c8f3
-
SSDEEP
3072:4lCo4XB2+FQF7qMupPn2bxE/OWv04EIkwl6CsN96KOsGySQixDwMH5VKyPi8UE6e:GJ4XBTZPCE/OWv04r36PWK+ja84sO4V
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d5e6852db5a1c2d87a16af85b11d8a91_JaffaCakes118
Files
-
d5e6852db5a1c2d87a16af85b11d8a91_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 159KB - Virtual size: 159KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 143KB - Virtual size: 142KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ