Static task
static1
Behavioral task
behavioral1
Sample
5620096b0ad8f68acf2a71d924a809a9_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
5620096b0ad8f68acf2a71d924a809a9_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
5620096b0ad8f68acf2a71d924a809a9_JaffaCakes118
-
Size
339KB
-
MD5
5620096b0ad8f68acf2a71d924a809a9
-
SHA1
c6a3c5d40d1f1536840526d51a11f24afba3894e
-
SHA256
b5cb7761b6f67c4e2ce46c1d443fa735c6a3269073227f91f49c4ce516793ef6
-
SHA512
95bb86ad2a4fa198102a67a2c76d44ecc04e8b1c4391ddaf02676c5ac5251adbf0e40f9b2c2c96d2eccc8276f5fdb9aa443ef3e6ec0277374f57edbaffb68b2e
-
SSDEEP
6144:/ZXl/F2idZecnl20lHRxp3ggY+k5mo7tiX2NsCQ2wZkK:/NzF3Z4mxxZY9AiL2C0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5620096b0ad8f68acf2a71d924a809a9_JaffaCakes118
Files
-
5620096b0ad8f68acf2a71d924a809a9_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
heatray Size: 325KB - Virtual size: 328KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE