Static task
static1
Behavioral task
behavioral1
Sample
5a7c40ea1654391854e752bed98b84c8_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
5a7c40ea1654391854e752bed98b84c8_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
5a7c40ea1654391854e752bed98b84c8_JaffaCakes118
-
Size
1.9MB
-
MD5
5a7c40ea1654391854e752bed98b84c8
-
SHA1
e35e3e765803176b63e244a65d6a44f9a479c2b3
-
SHA256
a0c2bd0d0c66eb5441805931bdecb82cfc6f33f69f55353a593a9f4e668f177b
-
SHA512
ffa7ab3540c910835dcf1ef44af628cc26ad080dba0ab3b7f754c6dbe6cb2ecc9429efc0b5192b4a2d7c7e77f3fe3c9437c771cbfef491aa28aebeb130a75f4a
-
SSDEEP
49152:LS+cXI27Fy0onthBc2N5wR7qjpCYCHKQ6jKgn57etetaR:LS+cY2honxc2P+9jqQjvesR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 5a7c40ea1654391854e752bed98b84c8_JaffaCakes118
Files
-
5a7c40ea1654391854e752bed98b84c8_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 312KB - Virtual size: 688KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 15KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Meriland Size: 1.6MB - Virtual size: 3.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE