Static task
static1
Behavioral task
behavioral1
Sample
5d19a54509527e919ff67e43b582da35_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
5d19a54509527e919ff67e43b582da35_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5d19a54509527e919ff67e43b582da35_JaffaCakes118
-
Size
31KB
-
MD5
5d19a54509527e919ff67e43b582da35
-
SHA1
eb1b0f62b9f8e09ae29b862986be0acf58bd9f64
-
SHA256
a2710e5aa7fdc8865c48d905caedd4155bcefb03009fc0591f6648a8cb777e34
-
SHA512
6c09e5c8a9e33ba598eb870704a77442149793a0a20d5e5e922c75db72f9861b16783953bf5e42ba012d80ac753ca83be2b604547f8de7a2983c08645a31f39c
-
SSDEEP
768:nN5F3JbUOjScb6l8fQb8o2sk58W1rWevsHhp66iKId/:nN5zbUSG8f4Zk582rWevsHn66lId
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5d19a54509527e919ff67e43b582da35_JaffaCakes118
Files
-
5d19a54509527e919ff67e43b582da35_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 21KB - Virtual size: 88KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE