Static task
static1
Behavioral task
behavioral1
Sample
f5ae9b0259b7b1aacacdcea6b88f995e_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f5ae9b0259b7b1aacacdcea6b88f995e_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
f5ae9b0259b7b1aacacdcea6b88f995e_JaffaCakes118
-
Size
58KB
-
MD5
f5ae9b0259b7b1aacacdcea6b88f995e
-
SHA1
64b79432fa56a3c497a8dc74583a5a6b9f8e44bd
-
SHA256
487086e9bf576e5e4b07e227ee9eb5c86ddf8814d9cbe4e87d1270c52879b92e
-
SHA512
e51ea373e43b01bbec4a983a9885885066380ed25d96e7fe70e5dd419385432b5c4c21555b21b4dd6fa5271d07a9bb0373cd1262e2e295edbd6e62e653e5adf5
-
SSDEEP
1536:EU5uuPx7CekUE0a/L9VNwnTr3annpIgn/nC7Lytn8nnnnnnnnnnnnnnnnnnnnnnp:uDekV0E9gfqpz/C/K8nnnnnnnnnnnnnp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f5ae9b0259b7b1aacacdcea6b88f995e_JaffaCakes118
Files
-
f5ae9b0259b7b1aacacdcea6b88f995e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 35KB - Virtual size: 34KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 13KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
XJ Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE