Static task
static1
Behavioral task
behavioral1
Sample
5c833cb4e17a211810873928c2f48e18_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5c833cb4e17a211810873928c2f48e18_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5c833cb4e17a211810873928c2f48e18_JaffaCakes118
-
Size
41KB
-
MD5
5c833cb4e17a211810873928c2f48e18
-
SHA1
e9bdc1d6f279d59ff229aaa58ef7d0a215a0e3b3
-
SHA256
4cf4798584f15b4fa5ff559ee7c3db26bb0aa74258170397f2c43847eed3a23c
-
SHA512
d9fb7a47612982eb0338cd4ff3546845d0757486b752f71813d4c51d258507333657231b95efa02717d5d9891a51a7558d1307d5aed5ecbbbc8cb915eb6a3bf0
-
SSDEEP
768:C3g6FqCKely6noaYjt22LmyozZ6tr9KehUAF1hNDAC298mwn:Cw6RKOoasYum7z6K+FjN529lwn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5c833cb4e17a211810873928c2f48e18_JaffaCakes118
Files
-
5c833cb4e17a211810873928c2f48e18_JaffaCakes118.exe windows:5 windows x86 arch:x86
7eaeb8de82ab2c893d1195e30cc60321
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
DuplicateToken
Sections
.lyl Size: 33KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pqzed Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.fwjwx Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vkl Size: 1024B - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE