Static task
static1
Behavioral task
behavioral1
Sample
5b7ad1d48f8f8da76f70231181bd67af_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
5b7ad1d48f8f8da76f70231181bd67af_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
5b7ad1d48f8f8da76f70231181bd67af_JaffaCakes118
-
Size
364KB
-
MD5
5b7ad1d48f8f8da76f70231181bd67af
-
SHA1
713e3a692605a9cb78850a161f043c5ed43a654c
-
SHA256
0fcc2b0501f4c02c3fbe176834287f3e1959285c529376a10b7cf63bc12c462b
-
SHA512
2a4d5632e3806dd79d4992d6342ae4ac32313c3c7aa85999b32b9771119b31877c3a60fe9a042fe99288f52d086d1527e861990f48d90ab615777f9cf1ccab48
-
SSDEEP
3072:/qExx4jHGSBzfS9HduwVm9J+r1TWWldo7P9lwDzjdrP8SHhu+5aW24T3hF4CU8fG:/xH9vA+r1Kodo5lUjaopOChAgyR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5b7ad1d48f8f8da76f70231181bd67af_JaffaCakes118
Files
-
5b7ad1d48f8f8da76f70231181bd67af_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 144KB - Virtual size: 140KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 40KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 168KB - Virtual size: 167KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ