Static task
static1
Behavioral task
behavioral1
Sample
5fc089ded91e585fa72ee52063c5a98d_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5fc089ded91e585fa72ee52063c5a98d_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5fc089ded91e585fa72ee52063c5a98d_JaffaCakes118
-
Size
240KB
-
MD5
5fc089ded91e585fa72ee52063c5a98d
-
SHA1
0c6ebfa8ec349172b60fe01c5849f48e88acdc99
-
SHA256
269316e4952454e5988237b4510b9045f16e351dcc3d35158baf203cebf5be62
-
SHA512
4571ed1f45f0b2c78f4e5217110c8e309737b46fc93d91c5baf299876ad8a8e0284fae511f5f56496fd2bf7fc320b0612d80de071d30f4f1abc1c6d7cd1caec8
-
SSDEEP
3072:8sFVF2gmFiIwP5bZnd2NpNSwhv9S4lkP+romZR5/6UJYufI9cqQUmVMnsGagRojw:8Fhwvndor9xk2Jd9YufHYpxxw2aRuwI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5fc089ded91e585fa72ee52063c5a98d_JaffaCakes118
Files
-
5fc089ded91e585fa72ee52063c5a98d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
DJgCe Size: - Virtual size: 428KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DJgCt Size: 232KB - Virtual size: 236KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE