Static task
static1
Behavioral task
behavioral1
Sample
f5cc82a87381d4f935409ea5ad2b5219_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f5cc82a87381d4f935409ea5ad2b5219_JaffaCakes118.exe
Resource
win10v2004-20240910-en
General
-
Target
f5cc82a87381d4f935409ea5ad2b5219_JaffaCakes118
-
Size
72KB
-
MD5
f5cc82a87381d4f935409ea5ad2b5219
-
SHA1
cb1cab347e26d54edebf6192e580cff49eee5d41
-
SHA256
017342018538b0ede37fb9489eca153c094baf18dd16c2995f54648bcdede5bb
-
SHA512
898c16138e6e5a68dfedbb15b97e09900f453367808b82881f873baff6a1353506548e3ae98f7564e4f054b445f4164bb54e04801a1808deec228246146746e2
-
SSDEEP
1536:pn79cxSdsGGKm5fEsRm4QW0QVw3q/MCC8JfghZpuT1YMG:p2xyGusR/0QV1FC8lgvpuY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f5cc82a87381d4f935409ea5ad2b5219_JaffaCakes118
Files
-
f5cc82a87381d4f935409ea5ad2b5219_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 56KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
snew Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE