Static task
static1
Behavioral task
behavioral1
Sample
5b8a3705aac6c854255cbcbe7062c104_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
5b8a3705aac6c854255cbcbe7062c104_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5b8a3705aac6c854255cbcbe7062c104_JaffaCakes118
-
Size
647KB
-
MD5
5b8a3705aac6c854255cbcbe7062c104
-
SHA1
26b85c0ad19abe834d302209266476bf55652d17
-
SHA256
4c6e31cf4813fb365023acc8906d7b13a692aa17f61efed60413eeb7babddbad
-
SHA512
989579bda6c0c45fb9ab6c7899fdee05733f631d48d4037ddccb26e0c7e0cc282647ec59a64794b772be06722b67082eae12201eb2efd2374d44dd8b88c07697
-
SSDEEP
12288:zSXMaa7GCHnCX70L/0BRYpvzwgCK2+ujJ3KlddaZz3dZkmbIy4XaxJ5s:zwMaa71Hm70L/C2zwYCJ0qZ0yBDs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5b8a3705aac6c854255cbcbe7062c104_JaffaCakes118
Files
-
5b8a3705aac6c854255cbcbe7062c104_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 647KB - Virtual size: 648KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE