Static task
static1
Behavioral task
behavioral1
Sample
b5fe58646824049dc251f0ebc704d0d9_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b5fe58646824049dc251f0ebc704d0d9_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b5fe58646824049dc251f0ebc704d0d9_JaffaCakes118
-
Size
318KB
-
MD5
b5fe58646824049dc251f0ebc704d0d9
-
SHA1
0286153744116c08bf665c495858ffc9d97d68ea
-
SHA256
45f9145ef0d9319c4812034f43778d02c22e8fe5344416bbdb624e1afec51fd0
-
SHA512
92a1f43564a3adccf77040de8cd86af8c0f677684cae72e64e0c87f434853d8f66ce23e9e297550e68f76a019fd9981586e14876ec0bb761d59a092df6bce8b9
-
SSDEEP
6144:OzT7ktVZl+g4o1KUWcTQIJHZDT3Y4nSkqE50Nu:OzXWXcgr7UILf3Y4nSkqE5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b5fe58646824049dc251f0ebc704d0d9_JaffaCakes118
Files
-
b5fe58646824049dc251f0ebc704d0d9_JaffaCakes118.exe windows:4 windows x86 arch:x86
5a498eee87e4d89512a84502f500181f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
LoadLibraryA
Sections
Size: 274KB - Virtual size: 708KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 19KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE