Static task
static1
Behavioral task
behavioral1
Sample
5bb18248d81b6b40a90958cf61e3b1c9_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5bb18248d81b6b40a90958cf61e3b1c9_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5bb18248d81b6b40a90958cf61e3b1c9_JaffaCakes118
-
Size
79KB
-
MD5
5bb18248d81b6b40a90958cf61e3b1c9
-
SHA1
a846cd755ae1fd6a2e21b8455683c8b398976a8b
-
SHA256
3674d2ae8d8f75044a4f2d29a8c8981a223890e9cd8316c3010509c1b61217aa
-
SHA512
df9758c522d57aa423b09e59ca2b7bfbc842d18cad5e7f36337a1869f8124fc6186858bc0fc6a8d118da02e814fc9e0f87f125a3641616152c46f9e8e6e52ed4
-
SSDEEP
1536:hmXRlj3Pux6p9gUt8TnHK07k0obnkTovx6p/5Y3KtVfD3wPAT40+f/rUxu1SrmFf:hmXRlj/uxJXnHKzbfx6R5xtVfTws4PbF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5bb18248d81b6b40a90958cf61e3b1c9_JaffaCakes118
Files
-
5bb18248d81b6b40a90958cf61e3b1c9_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.scbdqc Size: 3KB - Virtual size: 124KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rtasoq Size: 29B - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vwfmlw Size: 72KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 923B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ