Static task
static1
Behavioral task
behavioral1
Sample
5d11df3ee7d409c71f00a6e2490405d5_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
5d11df3ee7d409c71f00a6e2490405d5_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5d11df3ee7d409c71f00a6e2490405d5_JaffaCakes118
-
Size
136KB
-
MD5
5d11df3ee7d409c71f00a6e2490405d5
-
SHA1
a099b2cee4abef049a50e86eaae562b9aa2adf7b
-
SHA256
798f8f8fc7017b87c383298e5f6cc2e354ac041a2ea20d9db338c9f25fb015c0
-
SHA512
51012f25ff22cde380dbff4d8487d1202516ae6dc37abb52c98729ba2a30deea811a158b42b849aba9f99fe9049745c0a62c2f3efba536b1241da4b4858b8c6a
-
SSDEEP
3072:BewdJfaR38x2QPgxFWgmcOnR7SKcOW6KZRmoXrZM0Twba:Bewvx2SgTjERiOWX4oXrTf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5d11df3ee7d409c71f00a6e2490405d5_JaffaCakes118
Files
-
5d11df3ee7d409c71f00a6e2490405d5_JaffaCakes118.exe windows:4 windows x86 arch:x86
81c2cf7e214d567b43c7f9ac8fc45d97
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadLibraryA
IsDebuggerPresent
Sections
.text Size: 108KB - Virtual size: 132KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 27KB - Virtual size: 28KB
IMAGE_SCN_MEM_READ