Static task
static1
Behavioral task
behavioral1
Sample
5d76825c5be0d7d1d3efb3e74934155f_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5d76825c5be0d7d1d3efb3e74934155f_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5d76825c5be0d7d1d3efb3e74934155f_JaffaCakes118
-
Size
303KB
-
MD5
5d76825c5be0d7d1d3efb3e74934155f
-
SHA1
28923ecd0136b57d6583e0395fa0552b4b350089
-
SHA256
4630580926c14e24f524f343beec0b57d0b3c52cebd901946beccf589b66dac5
-
SHA512
e1f4e3c9859e50cd5c4e4c3f7774c3c904bb884939abe73b3408e87674086593835be9bf4f38a080e765410c6b0e5cd8628cf354409d34dae0f68821e1683a81
-
SSDEEP
6144:MyHXeazQYdIOmrjBPfRIZjYUhfxydQ26c2Eq5HYQ6e2Koi8D5yfBs:MyfItjpRgkU5xDpVjH2H/5yf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5d76825c5be0d7d1d3efb3e74934155f_JaffaCakes118
Files
-
5d76825c5be0d7d1d3efb3e74934155f_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 296KB - Virtual size: 456KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE