Static task
static1
Behavioral task
behavioral1
Sample
5af6e2d72608c97a1938e75214fb671c_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
5af6e2d72608c97a1938e75214fb671c_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5af6e2d72608c97a1938e75214fb671c_JaffaCakes118
-
Size
446KB
-
MD5
5af6e2d72608c97a1938e75214fb671c
-
SHA1
686e14e446f99e377dc45e4cdb67196215fbb572
-
SHA256
679a2906b41a9f90751c8a15db20366e23413481d914584ac10861d8e46d26c8
-
SHA512
5f9c7c34f620db15dd3e3f4bd6fc76befdb0fcec28839c3e472a308e3f3eeefedbaa31e1e9362925ffb551489efb5f99ebf27eede2692bb59194905dc1ee5f7e
-
SSDEEP
12288:+lNn6oe+C2na0tHYW4CVF6q8CfMDqBCz2phOVVV:+X6oeOaWHYWBqDiE2phOVVV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5af6e2d72608c97a1938e75214fb671c_JaffaCakes118
Files
-
5af6e2d72608c97a1938e75214fb671c_JaffaCakes118.exe windows:4 windows x86 arch:x86
50bd89437edd7d864944d03b054cdec4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SwitchToFiber
GetProcAddress
ExitProcess
GetPriorityClass
GetModuleHandleW
Sections
.text Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 11KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 439KB - Virtual size: 439KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ