Static task
static1
Behavioral task
behavioral1
Sample
59a9d5f122a88a8126cc6f63326ea8a1_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
59a9d5f122a88a8126cc6f63326ea8a1_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
59a9d5f122a88a8126cc6f63326ea8a1_JaffaCakes118
-
Size
314KB
-
MD5
59a9d5f122a88a8126cc6f63326ea8a1
-
SHA1
e0bac64acaac8720a2b9d257011b5d0837ce00ac
-
SHA256
c7d5d55ecf457378caee00c90d9bc2660f4e96be636e3bdf31f02535fe58eb2f
-
SHA512
6c1b0d7f10f1b00c3e984f4b5e06db7778074f936b9c9d96d0eeeee801b8de43aca25abae082c5433215c39363a06d8de9556cbeb2ba349d68afd1739455e659
-
SSDEEP
6144:BknjKqe98sqrT1J0yWktO/VPqe073APFllJ/Rh4RrgKgakiCnLcUNxhQlherjHAB:BKjKqe5S0WtjJ3W3lPhIE8fCLjn+hCiD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 59a9d5f122a88a8126cc6f63326ea8a1_JaffaCakes118
Files
-
59a9d5f122a88a8126cc6f63326ea8a1_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.text Size: 307KB - Virtual size: 756KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE