Static task
static1
Behavioral task
behavioral1
Sample
5afe28806b3ad3005efac9ba8cf61465_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
5afe28806b3ad3005efac9ba8cf61465_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5afe28806b3ad3005efac9ba8cf61465_JaffaCakes118
-
Size
275KB
-
MD5
5afe28806b3ad3005efac9ba8cf61465
-
SHA1
33c167e845b04a6b5d96643ac03660f5af4c9460
-
SHA256
221158aae2a1a84cfe182c62008de3616b5ac8fcd38cb2ba169b320a84caec80
-
SHA512
b039d449dc9e7da9d1f1446e47bd4a31ab6abb8f6aabc4c028eff61ba4fb826ccb0dc644a3e7bcb779f432738648f354932c7cbba941fe3983fbea59f913ee63
-
SSDEEP
6144:N22yEkU+8GkM7YioBMbik6bQdQ/8BNBhs6VwAlnvsf:N2bE3XPDxBSNNNBhBv8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5afe28806b3ad3005efac9ba8cf61465_JaffaCakes118
Files
-
5afe28806b3ad3005efac9ba8cf61465_JaffaCakes118.exe windows:4 windows x86 arch:x86
87bed5a7cba00c7e1f4015f1bdae2183
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
Sections
.nos Size: - Virtual size: 88KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 57KB - Virtual size: 57KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ