Static task
static1
Behavioral task
behavioral1
Sample
5599879351d2e8a377ea5729fe98be25_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
5599879351d2e8a377ea5729fe98be25_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
5599879351d2e8a377ea5729fe98be25_JaffaCakes118
-
Size
1.2MB
-
MD5
5599879351d2e8a377ea5729fe98be25
-
SHA1
ea83eebecd805d9bfb31f4de201ff02e2ec99cdb
-
SHA256
c938a05f1c64da9cfc5a31903926c9d71ab061929472104f4f1b7bce9e8fc7eb
-
SHA512
1c5c1d3af27cebe93953d2cad63214de0f329a79381a6a4c0f0ff21d31b2f91f7e59cfbffdedbc106a4980aba9004e7d9b0f94d2c85c2ec88fc68dabf0ceff52
-
SSDEEP
24576:6PbI5JO080VdmfLGPzhnrjmzxlBh8hYVOf/jHpjR1tQ69jp3gdPdsfEu5a:uI6080Vd64lm9t8h33zpjXWa1OkEu5a
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5599879351d2e8a377ea5729fe98be25_JaffaCakes118
Files
-
5599879351d2e8a377ea5729fe98be25_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.packed Size: - Virtual size: 15.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RLPack Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE