Static task
static1
Behavioral task
behavioral1
Sample
b5aea1c1c088bebe5c2db8a2bb302899_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b5aea1c1c088bebe5c2db8a2bb302899_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b5aea1c1c088bebe5c2db8a2bb302899_JaffaCakes118
-
Size
357KB
-
MD5
b5aea1c1c088bebe5c2db8a2bb302899
-
SHA1
12f5c611ad65d7a3697837c1ac801f38dd57ff41
-
SHA256
6ab59776524deb952bcb25ec6fcf1113173ca4241dbdd6537d06a835111d5ac0
-
SHA512
9266c990264cea4bcda6b7fb059a5ad0fc5f88f93c7130e5557f45650f0685c29087312274897239c965333da00b8f9aea0852f1351bbdafa49b5d5939bb053d
-
SSDEEP
6144:RDEELPH9ITq+DCqCyr26eoFRYm4Z8ulFgcDN+sVtWhzEDURf/WrgHnq:jdIO+OAar0um4aMFgcDnt9rinq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b5aea1c1c088bebe5c2db8a2bb302899_JaffaCakes118
Files
-
b5aea1c1c088bebe5c2db8a2bb302899_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 38KB - Virtual size: 452KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pimp Size: 314KB - Virtual size: 768KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE