Static task
static1
Behavioral task
behavioral1
Sample
f5dfba776ee11d6e33fba4af47a1dd8d_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f5dfba776ee11d6e33fba4af47a1dd8d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
f5dfba776ee11d6e33fba4af47a1dd8d_JaffaCakes118
-
Size
188KB
-
MD5
f5dfba776ee11d6e33fba4af47a1dd8d
-
SHA1
9710f6ccba7fb5495904487293b551b3361adc02
-
SHA256
6ea319944dfd23e63280442946b8d9bb3b1630c4b63ddedd4dfcd5a6a1009692
-
SHA512
9e88642ac6a6ed68a21cae1038558e5646bf3181a56471a83cf2eb84f994790398421f29e8bde0d1a12fb860f0ea3f7a9d6703afd34c58cd121b0abf24e3a1f8
-
SSDEEP
3072:sqVuvvOqyUlhlXWONEJ3ZvMXZv3mJqout9:3ueqyUnVWOKZAF35oS9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f5dfba776ee11d6e33fba4af47a1dd8d_JaffaCakes118
Files
-
f5dfba776ee11d6e33fba4af47a1dd8d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
CODE Size: 156KB - Virtual size: 156KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE