Static task
static1
Behavioral task
behavioral1
Sample
5b08d13e3505c6cd29771b3bf8fa3230_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
5b08d13e3505c6cd29771b3bf8fa3230_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5b08d13e3505c6cd29771b3bf8fa3230_JaffaCakes118
-
Size
20KB
-
MD5
5b08d13e3505c6cd29771b3bf8fa3230
-
SHA1
f116909d4e373e8a0b58e04325314b08672171d5
-
SHA256
fa76de7a940112b11becb4230f803bdad9af006dd569e0650196e05d15978fb7
-
SHA512
a2e7f698bb5a4983b4ca1e680748dafe4310a738f4905390afd20c3fd2eb3115db01f6ecfb1761ff66eb4687362d73e3e25dc6388097304fdefc36e38c08a372
-
SSDEEP
384:bGnUoif4O3aa3KJ9+QAX53vNDXQYzq68+yoCHVjGQjZtTnkdv:bGn2wa37X53vpJqV+yZZnLqv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5b08d13e3505c6cd29771b3bf8fa3230_JaffaCakes118
Files
-
5b08d13e3505c6cd29771b3bf8fa3230_JaffaCakes118.exe windows:4 windows x86 arch:x86
d76f4237a8ae158292f09835997a1d9f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateProcessA
Sections
.text Size: 15KB - Virtual size: 220KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ