Static task
static1
Behavioral task
behavioral1
Sample
5edcba3f191072bee79b57fe27324b64_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5edcba3f191072bee79b57fe27324b64_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5edcba3f191072bee79b57fe27324b64_JaffaCakes118
-
Size
86KB
-
MD5
5edcba3f191072bee79b57fe27324b64
-
SHA1
8a4e7dea9fbcc225ebd1e7d5b3bc01d9461f3519
-
SHA256
7d4e5bacaa9edc604c75eb41d27633dc94cff04f70f4da527abe0b7b60d74d79
-
SHA512
7beca77a12e6e2af9543c9ba6f40e9fd26b1bc93208a9c613bb7c47cd995fda00356fc5b1560afe1b5815f48dfce1d340c440b387af95a4f69112245b624ebf8
-
SSDEEP
1536:wyK2pnnm9TX71tB+Y6TA9ePkUsHmfZN4Nf1BnJNP7dcf7T61s5Varlj:TZnm9n1tAYQA9ePeGfZeNf1Njdw7T2cG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5edcba3f191072bee79b57fe27324b64_JaffaCakes118
Files
-
5edcba3f191072bee79b57fe27324b64_JaffaCakes118.exe windows:4 windows x86 arch:x86
97f0e062b8d523acca2876adf21963c1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetDateFormatA
SetProcessShutdownParameters
LockFile
CancelDeviceWakeupRequest
BeginUpdateResourceA
MoveFileA
HeapAlloc
GetVolumePathNameA
SetThreadPriority
WaitForDebugEvent
WriteFileGather
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.xrdata Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE