Static task
static1
Behavioral task
behavioral1
Sample
5aba9b5c47499af6fb57543b2a7192ce_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
5aba9b5c47499af6fb57543b2a7192ce_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5aba9b5c47499af6fb57543b2a7192ce_JaffaCakes118
-
Size
84KB
-
MD5
5aba9b5c47499af6fb57543b2a7192ce
-
SHA1
6ea22f1e0f78b520cb4c32cca399abad8a8b0171
-
SHA256
bc594c3ee8cbeee1bcfd68c25b724d2f4e5f63ea2a6b9111941c1a3c200365f0
-
SHA512
c6f91089c0133e7450b3a9767bb39e64b2e5aa9b3299a1e392eca6e8695a8f60c88a360693fd55d29a61bb664502302933f80e2b610d4858e57150ebc614be61
-
SSDEEP
1536:mZiHM1qiUyUEpkMNtxPjI4EVkWbzajT3DV7fqSwHLGfl09p9lD9uT4a:vM2ylpk+ZT5mBrwl8B4T4a
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5aba9b5c47499af6fb57543b2a7192ce_JaffaCakes118
Files
-
5aba9b5c47499af6fb57543b2a7192ce_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 56KB - Virtual size: 53KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 793KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE