Static task
static1
Behavioral task
behavioral1
Sample
5f441f55bf53b379abf8e8a99d527aea_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5f441f55bf53b379abf8e8a99d527aea_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5f441f55bf53b379abf8e8a99d527aea_JaffaCakes118
-
Size
2.1MB
-
MD5
5f441f55bf53b379abf8e8a99d527aea
-
SHA1
fa0bb6f1b44c32c6d51c2216438060aa721dcc1e
-
SHA256
c8047c24d822c280425512b5da95a8a35a2b8d751ec1a41730f87acdc7bb0dfe
-
SHA512
ce7db1ab6c62bfa01cecaa8bc0d92c6bb4329b124d25784fd3c82d939ba02d29431bb0831c9995e14a83bcd6fd5fe8fcc0ad58845b081d3125638dc0c77820f1
-
SSDEEP
49152:zqSoFHRKJ9On21z2YuAI4wDutwNE1Jmp48QuR5xzuTMGeOx+:+SoFxW0nw2YODuSUk2bQifPx+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5f441f55bf53b379abf8e8a99d527aea_JaffaCakes118
Files
-
5f441f55bf53b379abf8e8a99d527aea_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 2.1MB - Virtual size: 3.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 29KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE