Static task
static1
Behavioral task
behavioral1
Sample
5b81308f6a2bdc48ff9bd46e003d4e4d_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
5b81308f6a2bdc48ff9bd46e003d4e4d_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
5b81308f6a2bdc48ff9bd46e003d4e4d_JaffaCakes118
-
Size
1.2MB
-
MD5
5b81308f6a2bdc48ff9bd46e003d4e4d
-
SHA1
77c5d67cc0499677374797c9372b38cde0f4e6bd
-
SHA256
f6b7b4f91fcfc6261cbbfbed73ba2b7d3ad86f1525ea801b43f4c307fcc959f7
-
SHA512
819de7b56bd9e592769a6a99c200401383794749b6a49fd7fc9c83831e91f26eb78acf9fc8f5f1665783c0f7669fa4b6d6803545c812ae8074721d1a63fd4acf
-
SSDEEP
24576:UuhatBh+erQZb+md4wmAMGBY+erQZb+md4wmAM4:bFerQZbd2+erQZbd2Q
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5b81308f6a2bdc48ff9bd46e003d4e4d_JaffaCakes118
Files
-
5b81308f6a2bdc48ff9bd46e003d4e4d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 144KB - Virtual size: 143KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 64KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ