Static task
static1
Behavioral task
behavioral1
Sample
a5294b41b0bf6c962e5aeca2b618fa00_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a5294b41b0bf6c962e5aeca2b618fa00_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a5294b41b0bf6c962e5aeca2b618fa00_JaffaCakes118
-
Size
80KB
-
MD5
a5294b41b0bf6c962e5aeca2b618fa00
-
SHA1
92b4e7038883b9136bb87e818f5c648b94930103
-
SHA256
28cb645caeeff6d3f43a359979fb41139c41f76f2ab0dd3bed3d9bc244d7ae79
-
SHA512
7d2d050d5653a24d5cc8a1ce948dde989e4886a3263d2a6ff28c14c8d8f3f943104aa9c028d23d0e334ce43c1db1a4d81310acc754774204f67cbbd4c621ef91
-
SSDEEP
1536:Rnaj9xpgA5x+miArG90iNceUvkaU31dTY+PtsNATj:cDrm05eS+Ts4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a5294b41b0bf6c962e5aeca2b618fa00_JaffaCakes118
Files
-
a5294b41b0bf6c962e5aeca2b618fa00_JaffaCakes118.exe windows:4 windows x86 arch:x86
5e58d0c080fff3efd1b29d3331696cd7
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DeleteFileW
Sections
���ۆQZ Size: 67KB - Virtual size: 67KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Ϡ���� Size: 12KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ