Static task
static1
Behavioral task
behavioral1
Sample
5e16150941e7e18760547d7aecd7ddf6_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
5e16150941e7e18760547d7aecd7ddf6_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5e16150941e7e18760547d7aecd7ddf6_JaffaCakes118
-
Size
23KB
-
MD5
5e16150941e7e18760547d7aecd7ddf6
-
SHA1
287468f6e8156b7d16bd10d7b68b6215b8c19c95
-
SHA256
4fa1055f184fe3a50d564b69638f4b3d79b9a78a258e0ef57d44d47d56c0ae56
-
SHA512
6fbaa9b9ff7dcf62ec306eaac637398e053d4fb9d79685fb4a2233b8a8f5beec31c18e189def0e8bb916f2f34ad886f776189fd5325c073202e783d99211532a
-
SSDEEP
384:B2yDb33h3Y7te7f/dk/il8kx6aS0VNU/4gyD/1t9/n6MwKZq7YkkkOhPVK:B2yDdMMHmaj6z0VNJ1xCMwUkK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5e16150941e7e18760547d7aecd7ddf6_JaffaCakes118
Files
-
5e16150941e7e18760547d7aecd7ddf6_JaffaCakes118.exe windows:4 windows x86 arch:x86
23fdf1f023e3ea31b4f23089bb8dc59c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
VirtualAlloc
Sections
.text Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 114B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ