Static task
static1
Behavioral task
behavioral1
Sample
5b1c0554100ec0b68c2fd3a6fc5ab5ee_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5b1c0554100ec0b68c2fd3a6fc5ab5ee_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5b1c0554100ec0b68c2fd3a6fc5ab5ee_JaffaCakes118
-
Size
539KB
-
MD5
5b1c0554100ec0b68c2fd3a6fc5ab5ee
-
SHA1
384718dec1b01516e6153d93cfeff951ebf27214
-
SHA256
0393068acb260cb68ef21941373c814482163af334cadbdb273e86cde7a79f70
-
SHA512
9f5db5ebd5ba569e68dc9852a01bb5adfe0ccca9cca3aca24974466bd93bec2d7023ebfc74d57edcedd9ec58f175ac8569d3219e4df4c7098f9fd90504e1db36
-
SSDEEP
12288:7mglu+OoSDMAN5jyPdB6Yu0eUhyKjZ+ljgAkE66/ulZrnOTwG76AU:aglu+U5jYdkYuohhjOjgAA62PrnOX0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5b1c0554100ec0b68c2fd3a6fc5ab5ee_JaffaCakes118
Files
-
5b1c0554100ec0b68c2fd3a6fc5ab5ee_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
text Size: - Virtual size: 328KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
data Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE