Static task
static1
Behavioral task
behavioral1
Sample
5fba4268fd51b1a1d7f09acfd85aba6c_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
5fba4268fd51b1a1d7f09acfd85aba6c_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5fba4268fd51b1a1d7f09acfd85aba6c_JaffaCakes118
-
Size
2.9MB
-
MD5
5fba4268fd51b1a1d7f09acfd85aba6c
-
SHA1
a8f2d8852d372f21a33d8b8d53e4213a1df21940
-
SHA256
43f0b5d17270c6a45258b667172de3c5822acb27d2280d164332a761949dc711
-
SHA512
d7df997a8e199826a06e737b679a61790084cdc82f4dc8689b50d6a48e45cb01db0d196b5b131764f2415790ea2fe58f53711d4f657443f785945ce74fc98eb8
-
SSDEEP
49152:sTe2GFtPZL3K1ccNFKQfsCvxXIefD3L+kcdsr1/7PCDpvbzoU:yXGrp3Ncg3emw1zuRbzo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5fba4268fd51b1a1d7f09acfd85aba6c_JaffaCakes118
Files
-
5fba4268fd51b1a1d7f09acfd85aba6c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.Upack Size: - Virtual size: 8.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2.9MB - Virtual size: 3.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE