Static task
static1
Behavioral task
behavioral1
Sample
5bb591ee86c1b7a6a14bd91b28c72249_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
5bb591ee86c1b7a6a14bd91b28c72249_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5bb591ee86c1b7a6a14bd91b28c72249_JaffaCakes118
-
Size
11KB
-
MD5
5bb591ee86c1b7a6a14bd91b28c72249
-
SHA1
b4764638198cd451c83465f94f9ad1e7d0f39240
-
SHA256
c3d5206574fcf99818d5574612130e6d89d29f3e86d2674d0aa315e1a01e3ef8
-
SHA512
0b8d06939f3055f5a781930a530735d326790b686c593879551261b524cb55742871ea16d4fea73aae87db85d8e474382c1a5167f77dd2460fa764d489699c39
-
SSDEEP
192:A/1jUNbX8+H4/UU3V/vjSarbc+E8cdwEHsF/w+6s:A/lUNj8+HjoV/vZ3c+EcEi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5bb591ee86c1b7a6a14bd91b28c72249_JaffaCakes118
Files
-
5bb591ee86c1b7a6a14bd91b28c72249_JaffaCakes118.exe windows:4 windows x86 arch:x86
4095e573fefd7e42df16f37c2ebbc83c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLastError
GetModuleHandleA
Sleep
VirtualAlloc
VirtualProtect
VirtualUnlock
GetFileSize
Sections
.text Size: 1024B - Virtual size: 622B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ