Static task
static1
Behavioral task
behavioral1
Sample
5659bab1b053072fa25ab1ab640ffe15_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
5659bab1b053072fa25ab1ab640ffe15_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
5659bab1b053072fa25ab1ab640ffe15_JaffaCakes118
-
Size
212KB
-
MD5
5659bab1b053072fa25ab1ab640ffe15
-
SHA1
13b0c46f8d3f3ffb54f418e510ff92aeae4b967b
-
SHA256
694e7730fdf313fbd7cdb34524003df61b736ed304c9af23bafc2812ad524012
-
SHA512
dd704deee3b67fffce4fbd1b1738f38bc742db31f165d9fc1cc24592d4e574abd818a2770baca28c131a4d8c3ad60768a0acc491eba67361be77d1a057808503
-
SSDEEP
3072:zHO/Yfk/S3drFc0BfYvwp7YAOQLwu7ddMUDxmtXBVy4carEfh5+Hxi4dh029:zHNNr/fYsYAXwoQ0mtxNcph5Ix/E29
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5659bab1b053072fa25ab1ab640ffe15_JaffaCakes118
Files
-
5659bab1b053072fa25ab1ab640ffe15_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 52KB - Virtual size:
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.XLWw Size: 4KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 148KB - Virtual size: 145KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ