Static task
static1
Behavioral task
behavioral1
Sample
5c79ef47a0abe16d4ae9f38848c30976_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5c79ef47a0abe16d4ae9f38848c30976_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5c79ef47a0abe16d4ae9f38848c30976_JaffaCakes118
-
Size
113KB
-
MD5
5c79ef47a0abe16d4ae9f38848c30976
-
SHA1
61c485197a7e8babaedcaa9499d7e3dc5aca485e
-
SHA256
d3fa0a51e01dec7c3c1214f666c422bc4d41fef9c1c080eefefaf5986335501f
-
SHA512
81960fefc58df52e44b5dc8400808747047863001021a8d5defe2c8f5a73d6b58c580b1dee8358e976cb59ea3314db5cc2e110830527bb12e608d6d19df54c4b
-
SSDEEP
3072:HO7jm/q9dfyYI0Q6S5GbmSKhci5HcsWKKNSpKY+:HO3mC3fyYI0QkDKsY+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5c79ef47a0abe16d4ae9f38848c30976_JaffaCakes118
Files
-
5c79ef47a0abe16d4ae9f38848c30976_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
5k58o Size: - Virtual size: 192KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pb Size: 113KB - Virtual size: 116KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pzyu Size: 365B - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE