Static task
static1
Behavioral task
behavioral1
Sample
5ca74ee8d91c9dd4d8d4562adcdbab7a_JaffaCakes118.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
5ca74ee8d91c9dd4d8d4562adcdbab7a_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
5ca74ee8d91c9dd4d8d4562adcdbab7a_JaffaCakes118
-
Size
1.0MB
-
MD5
5ca74ee8d91c9dd4d8d4562adcdbab7a
-
SHA1
f5b61e9f38db135fbb80d3282474b7f412dd47d4
-
SHA256
ec15404fe318fe297905fa397d5afa29b23e42b263a79d4d183e0ad96a7c6134
-
SHA512
80e6ce1713aaf9c35d3166f9f69e54db43665bed5efa592410a53a0d15dbbd60a4a053246cc2f0ff3c7d745cc2aae92db121d7f98dc97ae840b9e20067bec8ea
-
SSDEEP
24576:WSKwhKrsBtTGhQhJUjxDDnfASXsY3ljgfTeOwjZHe8fAIwgw4lAAx9BhmroA:PGhUqJAfWUfwjZHe8fAIwgw4lAAx9Bhm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 5ca74ee8d91c9dd4d8d4562adcdbab7a_JaffaCakes118
Files
-
5ca74ee8d91c9dd4d8d4562adcdbab7a_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 970KB - Virtual size: 970KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 86KB - Virtual size: 85KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ