Static task
static1
Behavioral task
behavioral1
Sample
5f99c0e793bf079fb17ec9c686bd6be0_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
5f99c0e793bf079fb17ec9c686bd6be0_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5f99c0e793bf079fb17ec9c686bd6be0_JaffaCakes118
-
Size
48KB
-
MD5
5f99c0e793bf079fb17ec9c686bd6be0
-
SHA1
410ffe3125db9a32dfa962cec8bb55e71ed607b1
-
SHA256
24e136aae83d44a5f4980a2e196a488b5993eeabc41fd700e0a62b536f2f5997
-
SHA512
58cb4e1e75be633bf1c46ff394553c8f559ca3a62c7d12e275cd433d9d8b050de0afd7ef6f43cb4acdfc76a0540584a9af2047a349888d8e4209d186fb7f181b
-
SSDEEP
768:3lA8vrfVcdxaADIs7gzOSI/bYrJxIu5aXwl1FpSCKWPQaIRJuz6H/47:3lAAfLAENyzDYrJxIu5UwD9KWIpRJuzJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5f99c0e793bf079fb17ec9c686bd6be0_JaffaCakes118
Files
-
5f99c0e793bf079fb17ec9c686bd6be0_JaffaCakes118.exe windows:4 windows x86 arch:x86
b71d8c1931cb0a297806c1529ed52c6b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualAlloc
ExitProcess
FindFirstFileA
GetCurrentDirectoryA
ReadFile
CloseHandle
Sections
.text Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 47KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE