Static task
static1
Behavioral task
behavioral1
Sample
5d2bf8571579f937654a76655fe48b9c_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
5d2bf8571579f937654a76655fe48b9c_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
5d2bf8571579f937654a76655fe48b9c_JaffaCakes118
-
Size
46KB
-
MD5
5d2bf8571579f937654a76655fe48b9c
-
SHA1
009bf8ae8cd4ddad5d6e85e8e24eccd232acffe5
-
SHA256
f453681ed3b929978d4b568b07ca96f29cadd3474e31b191724404b09d0fc5b7
-
SHA512
6bfb04bd8a75b27f546e23c212676acb2c465c540861eea1dbe199ee350b04d19e2cc719bbe4a1be5cf1dda8c819a31b4dc86ba831c1cff72df26b25e24e936a
-
SSDEEP
768:EZZ0UdLRioR9EgVnNiOtW9JbLy52xtOIzN6yH0PyD/AC1OYp5OZEMP+VXCGOnsW0:EZZHRiuW+id3xfBeyD/AblZEMP6OnsW0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5d2bf8571579f937654a76655fe48b9c_JaffaCakes118
Files
-
5d2bf8571579f937654a76655fe48b9c_JaffaCakes118.exe windows:5 windows x86 arch:x86
aa6bad5b0bfecf9f9c8257e864d67fb7
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
AddAtomA
Sections
.text Size: 36KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ