Static task
static1
Behavioral task
behavioral1
Sample
5b6f95b7b2b68f07fe4d8a3372be1472_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
5b6f95b7b2b68f07fe4d8a3372be1472_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5b6f95b7b2b68f07fe4d8a3372be1472_JaffaCakes118
-
Size
198KB
-
MD5
5b6f95b7b2b68f07fe4d8a3372be1472
-
SHA1
a89c783f680f5e7c6350e82bf158625ec19bafbf
-
SHA256
754fd3f0fdb599543889c8c9b96150f331495cfeaa21c0e3dc968da8bd1d8f9b
-
SHA512
27d07fb17214121f60c5b3c74a716f2ff43e96a3ec6362753b1e7333185e9241f825b76e2cbaa29ede8fba5bae1722b3f13e904a5b8034bc3398842af1954bc3
-
SSDEEP
6144:CEQ8LXoB8q+X8G6uKkAIZmbqIyfpaiuXR0RWTy:CT2q+X8G6uKkAamWIyfpruh0IO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5b6f95b7b2b68f07fe4d8a3372be1472_JaffaCakes118
Files
-
5b6f95b7b2b68f07fe4d8a3372be1472_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 193KB - Virtual size: 193KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE