Static task
static1
Behavioral task
behavioral1
Sample
f5b7992b00bba055b091cfbf77448903_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
f5b7992b00bba055b091cfbf77448903_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
f5b7992b00bba055b091cfbf77448903_JaffaCakes118
-
Size
5.1MB
-
MD5
f5b7992b00bba055b091cfbf77448903
-
SHA1
96a0a0d23ddc60a1f9bac1a374184fe20271264d
-
SHA256
745bd9608670bd86263fd5839a15f0822e881dfc4c0b3a8fb61cfe9cce6bde28
-
SHA512
18d43c5f96f285333db98fdabf3b376000b5e8167954f48429dc21fb231e2aaa1f0ffa0785bcc0bc964a5d5aed27008a4a3a7e5b79cacb46e8890d1f6620ca22
-
SSDEEP
384:V2/Fx1w9n0TYyxu/sqPO+uDHB13y4UyKxPSeunF4MmH5mnr6U53igkNS0MWSoRfj:VIFxnYD/1OBj0nPSeuF4f2mCMNvMWSo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f5b7992b00bba055b091cfbf77448903_JaffaCakes118
Files
-
f5b7992b00bba055b091cfbf77448903_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
�A ��V� Size: - Virtual size: 308KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ah�{��l� Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE