Static task
static1
Behavioral task
behavioral1
Sample
5f295293cfb7b9a304acdd30e67dcba9_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5f295293cfb7b9a304acdd30e67dcba9_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5f295293cfb7b9a304acdd30e67dcba9_JaffaCakes118
-
Size
68KB
-
MD5
5f295293cfb7b9a304acdd30e67dcba9
-
SHA1
47864ff5309e016850914449ebe8643c0c3cc68a
-
SHA256
d2eaac5071b5a18ee85d43475162e391457b267817a29b2750f72375a4472c8b
-
SHA512
22f4021412f131377e58280a4ba5bf97cfdacbddd8fb7d5fb0b643ee2cedfd55731cfc77d9f7aa880f92e9513b07ef0abe0f57072f4956d449f4d8a25aea30b8
-
SSDEEP
1536:lrtLoCOEhZYOIhw4SKIB4paDnfgxQDTfrGPht8x3gP26z:lxOOIqyaD77IhSiP26z
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5f295293cfb7b9a304acdd30e67dcba9_JaffaCakes118
Files
-
5f295293cfb7b9a304acdd30e67dcba9_JaffaCakes118.exe windows:4 windows x86 arch:x86
bf61fd0c4995f52e6502284e50c39e02
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
VirtualAlloc
VirtualProtect
VirtualFree
Sections
.cdsf Size: - Virtual size: 240KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.cdsf Size: 68KB - Virtual size: 72KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE