Static task
static1
Behavioral task
behavioral1
Sample
5e5222261e499f14ddc59edd5796ead4_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
5e5222261e499f14ddc59edd5796ead4_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5e5222261e499f14ddc59edd5796ead4_JaffaCakes118
-
Size
230KB
-
MD5
5e5222261e499f14ddc59edd5796ead4
-
SHA1
2ab643dde1f29dbd5d4d7497c303ebb57a4dfe9c
-
SHA256
ada3872e62a78218f1a0aef6eab7a3b6eb604039a33b710336fc66d1c884fe0b
-
SHA512
ccdb831ce80ff0874bc18f6da86c00cc36fc0a8bfe6e2b687cfa535c8bd7f22c508686cd38ed5162b92ab29900e200a36cebe0f3db8f3ea827ff97ae3919b3e4
-
SSDEEP
6144:N0TDvlkSNg/G1NlaNFCAR4TiHbwTHHz48o9V6:KZNg/9NFCsPsDw9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5e5222261e499f14ddc59edd5796ead4_JaffaCakes118
Files
-
5e5222261e499f14ddc59edd5796ead4_JaffaCakes118.exe windows:5 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 208KB - Virtual size: 320KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE