Static task
static1
Behavioral task
behavioral1
Sample
5b0bf8da8b9c3d537c87e502e731edc6_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5b0bf8da8b9c3d537c87e502e731edc6_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5b0bf8da8b9c3d537c87e502e731edc6_JaffaCakes118
-
Size
15KB
-
MD5
5b0bf8da8b9c3d537c87e502e731edc6
-
SHA1
58f26906e52195e9c769cd0d6a0632a43c8aefdb
-
SHA256
5b735a893cf7821dda3bea153bba2fa79a17aa2aeff36e179c121fd64aee8446
-
SHA512
294f9e276b5d93831c94cbde0b49b8108bf2c86125512944a35e4ed29d5235374f4d7d4d8b2df91b637c7cee9a325ad8be612f30e765f17bfaac82979c26b747
-
SSDEEP
384:IdmK56BWgIL4w3VfE9JAyTDjN1C0wKJTV6UZ6EN+qr0MHYUz/:e6B0L4w3Vf6fHTVZZ6Ej0EYUb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5b0bf8da8b9c3d537c87e502e731edc6_JaffaCakes118
Files
-
5b0bf8da8b9c3d537c87e502e731edc6_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.Upack Size: - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 15KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE