Static task
static1
Behavioral task
behavioral1
Sample
b5522dd09f16957d76a9e697a8123fbf_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b5522dd09f16957d76a9e697a8123fbf_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b5522dd09f16957d76a9e697a8123fbf_JaffaCakes118
-
Size
124KB
-
MD5
b5522dd09f16957d76a9e697a8123fbf
-
SHA1
417a5629cdc0e3d91ec30caee69480e0c1426f99
-
SHA256
5b40f4843e532f52008090b223fc71dee7bb4a656615cc0937c48ce84bd2c3cc
-
SHA512
813e504e84a92d6987affa2365fee658f117cc71ce36ca8a99051dedadc4110b0111de98cb4ebe07e7bf074c14fe8a7dcd6264d4bc9e6c13de0bac78f3bf6e33
-
SSDEEP
3072:sBJb6ZaZGihk4/yp1RkO1+bSiPKtfoRi:Y1cQGGkHp1RYbSiPYfoR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b5522dd09f16957d76a9e697a8123fbf_JaffaCakes118
Files
-
b5522dd09f16957d76a9e697a8123fbf_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 106KB - Virtual size: 300KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE