Static task
static1
Behavioral task
behavioral1
Sample
f5cf395d8ed6fb98795b30d5a869b4fb_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
f5cf395d8ed6fb98795b30d5a869b4fb_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
f5cf395d8ed6fb98795b30d5a869b4fb_JaffaCakes118
-
Size
415KB
-
MD5
f5cf395d8ed6fb98795b30d5a869b4fb
-
SHA1
ef4f14b4e801b06960bb3ccd52133ca9ad9a1289
-
SHA256
2cfb54bed07368589ad37494ee5bb54f8bd5f02a671e947c6ab09580d7b021cd
-
SHA512
e8686d140b3415766660a3c4f286aa71f3e63ce5ea67599e3d84f27c4d7b24a2ec4a80ae2300b489b901174a3e0546dda0a89e3514677fdd22e230f3f4146473
-
SSDEEP
6144:0J53Q+Gq9tOlE5XzQ5GhyXdIGN0kK9RLjXYQYdJbWqAW5lDRF0wMOtFUKCyMEJ/0:0rQFJlcjahURPoj5WqAWj/0wM2FSEi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f5cf395d8ed6fb98795b30d5a869b4fb_JaffaCakes118
Files
-
f5cf395d8ed6fb98795b30d5a869b4fb_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.Upack Size: - Virtual size: 4.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 503KB - Virtual size: 512KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE