Static task
static1
Behavioral task
behavioral1
Sample
5e80160452614718cb5aa162ffbaaab5_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5e80160452614718cb5aa162ffbaaab5_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5e80160452614718cb5aa162ffbaaab5_JaffaCakes118
-
Size
611KB
-
MD5
5e80160452614718cb5aa162ffbaaab5
-
SHA1
67e1db7746235020f4a8ca2291add8c2248482b7
-
SHA256
19e3545d6cb029ca8762b2e603ed9bb0520419ef7f15a9a453c0eadbe3cfc78e
-
SHA512
1c2ca0fa2366d93302898cfb4647eb7799567f5973b284625c76a3aa186fc789fbb52e3376ce2c2f1dd503ca182fbdd37be25cf27ce090a07eab09d4263cbb54
-
SSDEEP
12288:/GLEI1OCLmdk4rDKkDrv+KUxYvfB0jSjeOlBScToXridtiSk5:+LEjCLmq4rPvGxkJ7jrfY4tFE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5e80160452614718cb5aa162ffbaaab5_JaffaCakes118
Files
-
5e80160452614718cb5aa162ffbaaab5_JaffaCakes118.exe windows:4 windows x86 arch:x86
87bed5a7cba00c7e1f4015f1bdae2183
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
Sections
.nos Size: - Virtual size: 244KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 84KB - Virtual size: 83KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ