Static task
static1
Behavioral task
behavioral1
Sample
5b15304c365a576c4b1e82290d846abc_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
5b15304c365a576c4b1e82290d846abc_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5b15304c365a576c4b1e82290d846abc_JaffaCakes118
-
Size
153KB
-
MD5
5b15304c365a576c4b1e82290d846abc
-
SHA1
5a97ec0f333041011f79be4fafdc29bc0a56109b
-
SHA256
0ea304d30114f0267e962931a0b020b6a92e0e48dec4e4022cfdbafe7be5e523
-
SHA512
0a1e9fa4a354af5b8b8be1ca846f26702926b447a99ed39db2eb1db5c920bde5a5c89190d2e08129f2163bafd961921a53b2a86fe5d7baf5631409e9abdd69b8
-
SSDEEP
3072:ZYj38YUXiM0SWt78PesmdsMgkGCgzNAyS+BHTBwZmNKoouisM96Z2Uuf:vY6Wt7seeYGCgzNAsHTeovoPLm2hf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5b15304c365a576c4b1e82290d846abc_JaffaCakes118
Files
-
5b15304c365a576c4b1e82290d846abc_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 458KB - Virtual size: 457KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 476B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ