Static task
static1
Behavioral task
behavioral1
Sample
5c12154de3a91217d919d1797a798f3c_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5c12154de3a91217d919d1797a798f3c_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5c12154de3a91217d919d1797a798f3c_JaffaCakes118
-
Size
38KB
-
MD5
5c12154de3a91217d919d1797a798f3c
-
SHA1
d913a00e404719cf72124886e951ecb8a3b74185
-
SHA256
9ce07b9d74633c28ca48c87b4393682d165f5e23caa51d6afa05d945e690feeb
-
SHA512
3c81738a7419a299f8852285a60fb1bddc987eca5dbe63740a2c6945ae1533320a1d63ba49885dce5c87d821583e64273e01032ff7b2d7e184e22e079f78fbcb
-
SSDEEP
768:Ke+yQkCn+qZR9E2buKz3T+W+BNg8y1yXUFSsyAvhwG1:rQxn+qZRVu0qtQ9yk0E5wG1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5c12154de3a91217d919d1797a798f3c_JaffaCakes118
Files
-
5c12154de3a91217d919d1797a798f3c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.Upack Size: - Virtual size: 124KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 37KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE