Static task
static1
Behavioral task
behavioral1
Sample
5b1e3c6680bfc78d10173994f442ed0f_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
5b1e3c6680bfc78d10173994f442ed0f_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5b1e3c6680bfc78d10173994f442ed0f_JaffaCakes118
-
Size
26KB
-
MD5
5b1e3c6680bfc78d10173994f442ed0f
-
SHA1
f5e84e7f3b000bdb30bb4464c13461588b8145c1
-
SHA256
f5e8694a078a0a560dc9764afc02d0c5a93783687a45d6524fadda46e85caeff
-
SHA512
cee68fdca84b7e4ebb6b78c090e17365d702813132df91ecb994f45822a09fbe5145467fce74d6521b745aa2a18ca286204e883848b1383b2e3f8cd03bf174d8
-
SSDEEP
384:ABiuVkeLtFA7IJyY1ou/1fTE4iggeFW8tJI5LKd9CR7Zs2UjAR2B1n5HsWa:4VzTAI319fmgDbTIpKd9als2OACyT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5b1e3c6680bfc78d10173994f442ed0f_JaffaCakes118
Files
-
5b1e3c6680bfc78d10173994f442ed0f_JaffaCakes118.exe windows:4 windows x86 arch:x86
28c6ef1128d2dc0d513ddf64919b7716
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
ExitProcess
GetStartupInfoA
GetCommandLineA
HeapAlloc
GetProcessHeap
Sections
.text Size: 26KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE