Static task
static1
Behavioral task
behavioral1
Sample
b5761372893a045b2cc924b67036df8a_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b5761372893a045b2cc924b67036df8a_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b5761372893a045b2cc924b67036df8a_JaffaCakes118
-
Size
38KB
-
MD5
b5761372893a045b2cc924b67036df8a
-
SHA1
8a6beb49c5193674aee1936f447cf107f471a459
-
SHA256
3875139d48b139b60c0434f8f1b4aa15d6a2a05182f74d9d40c521d919bd1db8
-
SHA512
70654a34476bf5ebe0b5f620d8d5689be8db2de184ab3fe4a6b34a150c4fdb1b88f4ff7c257216d190415b404091dfc27bca7700de1bf06c95aeedf88de83e1a
-
SSDEEP
768:fkGHuXpJf6QohNc/vWBvinyeUVAzhP9mkVY3LvJt00v0wSP6ugpY1pQTXY:fkGAnSQohNc8vKyeUAh1mkVY3NvHSP62
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b5761372893a045b2cc924b67036df8a_JaffaCakes118
Files
-
b5761372893a045b2cc924b67036df8a_JaffaCakes118.exe windows:4 windows x86 arch:x86
316f9661c85558da7e0cc9df6322c345
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualProtect
VirtualAlloc
Sections
.text Size: 1024B - Virtual size: 580B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 37KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ