Static task
static1
Behavioral task
behavioral1
Sample
5def09437e8243aa7359c02ac82860f7_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5def09437e8243aa7359c02ac82860f7_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5def09437e8243aa7359c02ac82860f7_JaffaCakes118
-
Size
15KB
-
MD5
5def09437e8243aa7359c02ac82860f7
-
SHA1
b04bf1b7063dd3c55db751a945366ca34b2d4df0
-
SHA256
c990550133fc88c6a042e5ad56ef33647e3e5f1b2a24840955d71f0c41fc7671
-
SHA512
426c05a4eee19a8c54a962057b483747d4638e4a61b94371cdfc23d3b6068ec738c1ccb7d71c59a64992dfef94c3f31e3def9be02ba99063231f721e31194b99
-
SSDEEP
384:hu2GKUYsSPknP6+DSCGyiHAOi1XiRxihwBTQELbB8sErajlzJOwzQ:8aUIci7CGyzV9hwVbB8EjlzJzQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5def09437e8243aa7359c02ac82860f7_JaffaCakes118
Files
-
5def09437e8243aa7359c02ac82860f7_JaffaCakes118.exe windows:4 windows x86 arch:x86
f11f9d43992b002b8d32d99190434e0a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
VirtualProtect
Sections
.packed Size: - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.RLPack Size: 13KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE