Static task
static1
Behavioral task
behavioral1
Sample
5bc3db364ce4440af60e5ca948332750_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
5bc3db364ce4440af60e5ca948332750_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5bc3db364ce4440af60e5ca948332750_JaffaCakes118
-
Size
459KB
-
MD5
5bc3db364ce4440af60e5ca948332750
-
SHA1
7f1a86cdbcbde27d0d24dd5581a1cefc8a32bdac
-
SHA256
de205b3bff384d2368f3f75df4a175152f35c34a8aa5ec1747cb8755c486267b
-
SHA512
b4b1c56e4b41ac59c0289f96015dca8dcc6c00ca4524267be7e5cb66aebb2bce79cddb40032ec3bdfb4fc7f30cd06a4a7e87912767302051f5ebadf1e49d1a11
-
SSDEEP
12288:JAtKKGyIQDL5yyHaGLpisaZUUNTUIcYuQxm:JAtJIEgGLVoVNFcam
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5bc3db364ce4440af60e5ca948332750_JaffaCakes118
Files
-
5bc3db364ce4440af60e5ca948332750_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.jqxldc Size: 3KB - Virtual size: 2.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sundxk Size: 54B - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nvfygw Size: 445KB - Virtual size: 448KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ