Static task
static1
Behavioral task
behavioral1
Sample
5bb8a8e7488e6bb55008e332b957e703_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5bb8a8e7488e6bb55008e332b957e703_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5bb8a8e7488e6bb55008e332b957e703_JaffaCakes118
-
Size
560KB
-
MD5
5bb8a8e7488e6bb55008e332b957e703
-
SHA1
819a53b692c55de252d2088c10d7ef85df6595b4
-
SHA256
cc34ac2e54f62b9dd65ad1ae05fba1cfe09cd198d3535126ee80f34f5c967b25
-
SHA512
8baa8c58676f0803a383e344c68542469fb28500d7f0003b0908f5cdb6220a9012561ccf56a331b3f6f7e28653bfbf07d8c335229d891d3a1b0b38de21ec3044
-
SSDEEP
6144:7HctWN+NSF2Y7HU8dbwJKWy2Z53zEjA/nFUcTYafb8D8/XRNYTUI+4+bAid8ChB4:TsA+QNX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5bb8a8e7488e6bb55008e332b957e703_JaffaCakes118
Files
-
5bb8a8e7488e6bb55008e332b957e703_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 548KB - Virtual size: 548KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE