Behavioral task
behavioral1
Sample
7864167084880d53a3073790bbf7124f_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
7864167084880d53a3073790bbf7124f_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
7864167084880d53a3073790bbf7124f_JaffaCakes118
-
Size
33KB
-
MD5
7864167084880d53a3073790bbf7124f
-
SHA1
2edd20f59b509980a14c54134898dfbe1b09e6a3
-
SHA256
baec1ce28b68b33d4a080e98a5732f347bdfdb5cdafd3f7b2c56cccb381f7d41
-
SHA512
efe175ee775c7b6dd0e69fdf9b2fb4ba634b293e33e61cfc292811938d10143c5be3998c20f5ac110be4266d815216382abf0dc969410286a43d76cb2858f936
-
SSDEEP
768:O3GifmWLyyK6Pw5GZIYqLdjDdoRfi6xa0eRXnWudx:bWLB5TuYIdua64Vzdx
Malware Config
Signatures
-
Smokeloader family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7864167084880d53a3073790bbf7124f_JaffaCakes118
Files
-
7864167084880d53a3073790bbf7124f_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 33KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE