Static task
static1
Behavioral task
behavioral1
Sample
5479b3b482cf70946fdf36925ec7e41c_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
5479b3b482cf70946fdf36925ec7e41c_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
5479b3b482cf70946fdf36925ec7e41c_JaffaCakes118
-
Size
118KB
-
MD5
5479b3b482cf70946fdf36925ec7e41c
-
SHA1
dbc00031a3893b7dae52c5c4e518aa996b409484
-
SHA256
af25f5e94195b4935b1ea9167a049507b6564539467e46f591e3497f56d38287
-
SHA512
56f3f4ac14e115c2285aa4522b20f3eacb7498b418ff32c05509902090ccb46ab48f83ddd73a0a61dd322306dd547afabce67635a875601893ad2d8685176551
-
SSDEEP
1536:qChTmJ2IiM6w2tDJzQSEcbgUbawr8kYDIO2FnToIfRe:4J2ZJzAcE4awrMl2tTBfRe
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5479b3b482cf70946fdf36925ec7e41c_JaffaCakes118
Files
-
5479b3b482cf70946fdf36925ec7e41c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 512B - Virtual size: 164B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 1KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 976B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 99KB - Virtual size: 99KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ