Static task
static1
Behavioral task
behavioral1
Sample
e5b356dce34d9e6e841f6c3a3fff9564_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
e5b356dce34d9e6e841f6c3a3fff9564_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
e5b356dce34d9e6e841f6c3a3fff9564_JaffaCakes118
-
Size
1.8MB
-
MD5
e5b356dce34d9e6e841f6c3a3fff9564
-
SHA1
0206dd4bb398219f04ebe639c50c2cad2a3b2292
-
SHA256
6cf4b5239b2ca64dd83237bb825c38e618db700c5bde768cea2d6275038df982
-
SHA512
d16e3488ca999a21ebcd641ba85379c2b7d5352fa2bfb3646d01035339164e67833fb2bb02f5bd01139e17952f3753b5875032e9a639a7531ba2cb6fef18e841
-
SSDEEP
49152:JiNBYhj28PKPise4cnw7OYn3cxrFVCefGCr:QnYhY1e7ninFel
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e5b356dce34d9e6e841f6c3a3fff9564_JaffaCakes118
Files
-
e5b356dce34d9e6e841f6c3a3fff9564_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 316KB - Virtual size: 720KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
WinLicen Size: 1.4MB - Virtual size: 2.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE