Static task
static1
Behavioral task
behavioral1
Sample
a5756d47b2bb5385f12e9e996c8cbbf6_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
a5756d47b2bb5385f12e9e996c8cbbf6_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a5756d47b2bb5385f12e9e996c8cbbf6_JaffaCakes118
-
Size
1.7MB
-
MD5
a5756d47b2bb5385f12e9e996c8cbbf6
-
SHA1
f551d15a7759fbb7c2e5de711658494a50f1faf7
-
SHA256
b195d14d46d70ba8b7d983e810863a4159fe8d6d6cb2416edcb71f759c0892c7
-
SHA512
5b2c2e29476d3b7035d7213d5bd6489c6f55b41d065e0fe51e5e58be9d993196f832bd65c293e3812be33e05ac3d25cc8176e9f5f25eb9ec893668e288b67682
-
SSDEEP
24576:ojCV0TbL37YKSaJf221F/82r3eJQnZ/4mBrVuacroVOj96IjC1ZjlrK/aD:vKTbT7hJT1FT3I/oC96Uw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a5756d47b2bb5385f12e9e996c8cbbf6_JaffaCakes118
Files
-
a5756d47b2bb5385f12e9e996c8cbbf6_JaffaCakes118.exe windows:4 windows x86 arch:x86
3c6123d303ca80e09ae8a08dbb30a95d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CopyFileA
Sections
qhtthayu Size: 29KB - Virtual size: 508KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 123KB - Virtual size: 142KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
nqxhezym Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
jpncsmcd Size: 665KB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
qgcnnnta Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE