Static task
static1
Behavioral task
behavioral1
Sample
5b6bcdd27ffe1a3fd81554f5fc30e61d_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
5b6bcdd27ffe1a3fd81554f5fc30e61d_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5b6bcdd27ffe1a3fd81554f5fc30e61d_JaffaCakes118
-
Size
604KB
-
MD5
5b6bcdd27ffe1a3fd81554f5fc30e61d
-
SHA1
3f87099dd86d7dcd0d2245685ee8323a764fcc6d
-
SHA256
d61133417fdb5db47fc5bce6c5f147570ed2bae1e8f7344132974d110ab327f2
-
SHA512
6ca538129bdb21fbcddf49b71333bbef65829c6f23c64ec3c739340c262b4cdef5bf153cabfb5825eea17c31368dc284ad82427b081abc464cdaa22b2469d377
-
SSDEEP
12288:7XvS0eMIjXpOdc8l7ChpF+5Za/77g/VUDG2m0rsYy:rvS024dtMPF+Q/pD/qYy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5b6bcdd27ffe1a3fd81554f5fc30e61d_JaffaCakes118
Files
-
5b6bcdd27ffe1a3fd81554f5fc30e61d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 164KB - Virtual size: 162KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 436KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ