Static task
static1
Behavioral task
behavioral1
Sample
65d5d19393fb5059140f544cdc069acb_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
65d5d19393fb5059140f544cdc069acb_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
65d5d19393fb5059140f544cdc069acb_JaffaCakes118
-
Size
199KB
-
MD5
65d5d19393fb5059140f544cdc069acb
-
SHA1
5e61fb9e0b21fd0975bc18ad6cd96718e05e23d1
-
SHA256
cc193206232adf835544c948ce0a4385f7bf575d9b9952ebeb1f91d1be6032ad
-
SHA512
6cc69e9ed1767ba8ffb72d7fa593f63b6485e224f425fa01bdf5225ff78eceda1916b927ef7db699f5fb82abc497458ea769686d6e0e9098d2b5e2419a07caa1
-
SSDEEP
3072:nG7+lAApeQN5/ioqPTYalF0agXgDKNj9C0c17WIx4SLzNmTUbparjPQHOv:nG7tfQN5/inEaMadDKNa1aIvvozQHOv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 65d5d19393fb5059140f544cdc069acb_JaffaCakes118
Files
-
65d5d19393fb5059140f544cdc069acb_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
KuNgBiM Size: 140KB - Virtual size: 144KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE