Static task
static1
Behavioral task
behavioral1
Sample
5b0419d5464145a181ac7e2e97689667_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5b0419d5464145a181ac7e2e97689667_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5b0419d5464145a181ac7e2e97689667_JaffaCakes118
-
Size
264KB
-
MD5
5b0419d5464145a181ac7e2e97689667
-
SHA1
fc58375431436310ba2fc8eaf6d64a984b0fbd2d
-
SHA256
89dd752769e9cc07a223f4afd099157b2115385cb4d8dc461e3cc4759a3be1bd
-
SHA512
6afca6e928ced65ee6382081c3f6e53c9a1a10e3d5d0737dab2d6e0376374f5add60d381c49858548ff4449ad13cbbdbd62946f7d05c20171c78f5c5d0ffb601
-
SSDEEP
3072:QpJygD6dYEZscjko1f7K02vdCfEgl4KemjUtKtLP89GboKfZom7r2QAuPbxg4kIZ:6oge1ZpV002vIMZKcGsoozQ9bVxdH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5b0419d5464145a181ac7e2e97689667_JaffaCakes118
Files
-
5b0419d5464145a181ac7e2e97689667_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
oQxGmro4 Size: - Virtual size: 188KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
JEncRXRG Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
SM6nEggz Size: 232KB - Virtual size: 232KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
OdvwuwSE Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
PXeaBJtP Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
JEncRXRG
-
OdvwuwSE
-
PXeaBJtP
-
SM6nEggz