Static task
static1
Behavioral task
behavioral1
Sample
f5441ed3f1e303c4fb5abe020fbcd945_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f5441ed3f1e303c4fb5abe020fbcd945_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
f5441ed3f1e303c4fb5abe020fbcd945_JaffaCakes118
-
Size
152KB
-
MD5
f5441ed3f1e303c4fb5abe020fbcd945
-
SHA1
4455dc37e13d6be6bef5df07ef25bd1f001cc9f2
-
SHA256
4053a03f50bc8908cd14262ae37db21bfcf26bc19df716c6c461776987a23ff2
-
SHA512
6e8a87f06e1521779ae5509d4cc7bfea062e6eeabb7ed0be80c338e19652573bb92b585dd306781b0d4f725c912e747b5778c0481199b4cdc0547689a3d31186
-
SSDEEP
3072:NDj8cXTW7YiP73nTY9tlXhVelKefzLjCKCsQsLVDDBS:NH8iTW7YsnqlhWfHj/BD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f5441ed3f1e303c4fb5abe020fbcd945_JaffaCakes118
Files
-
f5441ed3f1e303c4fb5abe020fbcd945_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 124KB - Virtual size: 128KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ