Static task
static1
Behavioral task
behavioral1
Sample
5f7d73393bdb72567f7b5d195945edd0_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5f7d73393bdb72567f7b5d195945edd0_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
5f7d73393bdb72567f7b5d195945edd0_JaffaCakes118
-
Size
25KB
-
MD5
5f7d73393bdb72567f7b5d195945edd0
-
SHA1
61144d7541e2620242c1032901c5d411f12cb239
-
SHA256
29e686bcd4a4c42b6c63913cce28bbf12c6f5c023ff615c383f54caeedcab902
-
SHA512
ca66b9464f358e515b2728c12fbd49f874e7bad3e77962e3406abcd5695f0a17b7a002c1d1104fd7a8913800ed835cb339e7c58e3bdf0a6444ed43b257062bc8
-
SSDEEP
384:n0vkAOYJdwIebbuqkJgMbgUzTCRR655MZlwweBt55H/RYW+5ZvhdBgq49Ix92:nQDAbbu9bgUvCtZSZBf5fd+ZdBgdF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5f7d73393bdb72567f7b5d195945edd0_JaffaCakes118
Files
-
5f7d73393bdb72567f7b5d195945edd0_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 21KB - Virtual size: 88KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE