Static task
static1
Behavioral task
behavioral1
Sample
1c5c08afb54b5a76ac8bd0b28fd46168_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
1c5c08afb54b5a76ac8bd0b28fd46168_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
1c5c08afb54b5a76ac8bd0b28fd46168_JaffaCakes118
-
Size
29KB
-
MD5
1c5c08afb54b5a76ac8bd0b28fd46168
-
SHA1
5fba7977c94f4c689c52c8f5e5eaff8801d59f68
-
SHA256
1580d21f64ea68d4b24e4307e59d5b8ae548f9f653cc4212f74ef82fa8830381
-
SHA512
fc23118ca11048cfc759ba1d34eae84daa93bf643075eab2ddb0d5c1a66dd8c480b1dd4acd8425e6282ee9a78a1e9fb829a040428ae3bda3267b10c1508caffd
-
SSDEEP
768:hSRyD9q6GPnC/G2jubmw2PmYIfM7T6lPv340:hST6GqetmwmIfa6Jv340
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1c5c08afb54b5a76ac8bd0b28fd46168_JaffaCakes118
Files
-
1c5c08afb54b5a76ac8bd0b28fd46168_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 25KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE