Static task
static1
Behavioral task
behavioral1
Sample
5f52162b0a7b4c251412fc5086d6d09f_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
5f52162b0a7b4c251412fc5086d6d09f_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5f52162b0a7b4c251412fc5086d6d09f_JaffaCakes118
-
Size
896KB
-
MD5
5f52162b0a7b4c251412fc5086d6d09f
-
SHA1
dd8e5c7729296da7cbb567f67e79b74e915b4303
-
SHA256
c91b8e44fa37438c4c6e7315d9954f70be2b9550c0424291617a33bda0864b03
-
SHA512
808f6f501bcb1a5323649afb8e2a41142ae8595a93b0ceeebe30995e10e00cf9e98aec019cb7c6129a48b74ca1ff224aa1dabe7daf5ed57464e36802d68041e9
-
SSDEEP
6144:yyK2/6mbqwoLXKVKo0/aUeHe0GrntLLqDFUvz7P0iNA6RuNlviovOOOqiMlbPnmw:I2/6mbqw+XKcndLq2P5NA0uNl5OG9D
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5f52162b0a7b4c251412fc5086d6d09f_JaffaCakes118
Files
-
5f52162b0a7b4c251412fc5086d6d09f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.Upack Size: 636KB - Virtual size: 636KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 256KB - Virtual size: 256KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE