Static task
static1
Behavioral task
behavioral1
Sample
5f62f321bd1dc88d67a709f6d1f3254d_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5f62f321bd1dc88d67a709f6d1f3254d_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5f62f321bd1dc88d67a709f6d1f3254d_JaffaCakes118
-
Size
268KB
-
MD5
5f62f321bd1dc88d67a709f6d1f3254d
-
SHA1
a27c6d124166f5e92a84993c86646fac1208c9b2
-
SHA256
e8587ece121c1146544b2fe9f3a1d3f5fb810506a1eafdb9a28c9a675961c102
-
SHA512
54448edb08b97e6c483f2ae4f6c8fb297061fde40d647bcce38bac2af93577d7709aa17735308a6f73d12da10755984dba69ff8b13477f3715194ee17db5a395
-
SSDEEP
3072:EIAu5jxlrF0TgHJ+zZVOiUFMXogagHaDtqRvBeshxQjWeFxSEyovcXNOAzxmm+:rAuNbbgzZV54g4DtqHqLv8b
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5f62f321bd1dc88d67a709f6d1f3254d_JaffaCakes118
Files
-
5f62f321bd1dc88d67a709f6d1f3254d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.Upack Size: 180KB - Virtual size: 180KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 84KB - Virtual size: 84KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE