Static task
static1
Behavioral task
behavioral1
Sample
5b5954584454d21003973a08eb471734_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
5b5954584454d21003973a08eb471734_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5b5954584454d21003973a08eb471734_JaffaCakes118
-
Size
182KB
-
MD5
5b5954584454d21003973a08eb471734
-
SHA1
5a902e27e04f1637a4b4aa186cd37f7f6afc244e
-
SHA256
6d26cdebaa11375c868e08495af96a835c2e2caa46aa990d392f413cb4cdefe6
-
SHA512
aa55be690cedf53524a1aaff248ed58d29bd80e01f8328a8f3e7aa7190190652bfed82fbf4d97b9bd6da62a20f3b27442d9948c558500ea888fb494bd50d7a1f
-
SSDEEP
3072:0RGQ7IzK328BecQkQCwhxHENmTNWproxsXNdRu0EmrOPGUKBPYJlrTcp9FnX:0R13TWjhdENuNlxsXc0prg8Bg8pzX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5b5954584454d21003973a08eb471734_JaffaCakes118
Files
-
5b5954584454d21003973a08eb471734_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.tamCORE Size: 512B - Virtual size: 488KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.tamCORE Size: 181KB - Virtual size: 194KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE