Static task
static1
Behavioral task
behavioral1
Sample
5c8c53a20f29bc245c2bb5728babab03_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5c8c53a20f29bc245c2bb5728babab03_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5c8c53a20f29bc245c2bb5728babab03_JaffaCakes118
-
Size
473KB
-
MD5
5c8c53a20f29bc245c2bb5728babab03
-
SHA1
93e9dae220a09f563f687e7bc6495bae220c7280
-
SHA256
9e5384a33abe652c395424bde1fa7b9efd7a4916815dc423f020c75bb5e5dfc5
-
SHA512
7010748a8a4b34e7bd42a4b133e8bc29fab7b5ee19ad1b04b0337a4d2e29552edbf5f569d7e7c21d50299eadbf3dd56515310a507b828c5bc565e9e02c595b20
-
SSDEEP
6144:odc4aSUP59Sg6mMNIiUKb8e9ZrfpbvRvcRWjlMgo9oZ+AJZMpGtsk98pKpY0hWzw:oK4aSU3oUKoyBMneZFZMpG6hpWoEzqcv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5c8c53a20f29bc245c2bb5728babab03_JaffaCakes118
Files
-
5c8c53a20f29bc245c2bb5728babab03_JaffaCakes118.exe windows:4 windows x86 arch:x86
2f3c5da38e687ed8e68cd2b55dbd54f6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
Sections
.text Size: 1KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 471KB - Virtual size: 471KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE