Static task
static1
Behavioral task
behavioral1
Sample
5bc6b79a4c2cac44099c41f60e6b8149_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5bc6b79a4c2cac44099c41f60e6b8149_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5bc6b79a4c2cac44099c41f60e6b8149_JaffaCakes118
-
Size
106KB
-
MD5
5bc6b79a4c2cac44099c41f60e6b8149
-
SHA1
baad24be50cac15390a5e807c14deb4ab9e836f6
-
SHA256
bad2024b60e3902be3d9f7b43d937dad2aa1b61de526c58cc4aa5990936a7ef2
-
SHA512
eeffcce72212ce4d6ab82da93860f13fbcd772ef957d7f125d06a3499f86a0d56bd29465fe7f3f4352e7566646155eb0f0e980c358bac148a92f7fbfcb20a202
-
SSDEEP
3072:C/ssVyLbaJW9N++dPq4OOC2nIpM3NnIm0JC6Idyh9l:CE5GIN+gNLnC8NImOCP4Dl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5bc6b79a4c2cac44099c41f60e6b8149_JaffaCakes118
Files
-
5bc6b79a4c2cac44099c41f60e6b8149_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
f Size: - Virtual size: 172KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
hvvjin Size: 105KB - Virtual size: 108KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
cootfajq Size: 357B - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE