Static task
static1
Behavioral task
behavioral1
Sample
5bb881c35ffc0627f2b24eb15b8c7211_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
5bb881c35ffc0627f2b24eb15b8c7211_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5bb881c35ffc0627f2b24eb15b8c7211_JaffaCakes118
-
Size
2.3MB
-
MD5
5bb881c35ffc0627f2b24eb15b8c7211
-
SHA1
b1b0515533919fbecf52fea15cfece5d2e522e15
-
SHA256
3cac2d73a00c3e76fa0fecaf2adff8d49c7da107d00a9803aed0faaf768c7aad
-
SHA512
dd1917e9518edc4bc044614a5547409ecd55d8c44a7dbed17ca64bc0d3df2317da9cb290fd2b38beb5de8f2024a2bbec9f13d9205ad6b4d4a2234201c7c9660f
-
SSDEEP
49152:wWP70BuSA+sGqit3LY8Wqlq67K6PANXQiLLHGc/KvvE:j0BS+sG35DKxNX2v
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5bb881c35ffc0627f2b24eb15b8c7211_JaffaCakes118
Files
-
5bb881c35ffc0627f2b24eb15b8c7211_JaffaCakes118.exe windows:6 windows x86 arch:x86
cc5f9b1fbec0e97b5153aac8fafbe030
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
FreeConsole
VirtualProtect
Sections
.text Size: 2.3MB - Virtual size: 2.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ