Static task
static1
Behavioral task
behavioral1
Sample
f5ef79270fd9ad4b0bdbb076f205f43a_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f5ef79270fd9ad4b0bdbb076f205f43a_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
f5ef79270fd9ad4b0bdbb076f205f43a_JaffaCakes118
-
Size
22KB
-
MD5
f5ef79270fd9ad4b0bdbb076f205f43a
-
SHA1
5a7c1c374b79780c81449525eb08cb7ca7bd2615
-
SHA256
b2cae0a5a4286dab9974573e8e77dd6609eb53a3c380c0be836921322e876682
-
SHA512
800636943a2b53072dd3aa39cc81ab0e76dfd44113be2d8baf1e0620a49d9764fd5e800ba02ffb8eacbd22b1225c13d06e2b3cdbdaca9e858264148e48a93a42
-
SSDEEP
384:t1p0DEqsi27lreMw+S1fFSQK/RdIlRNmijfvxFe1AMLJyp/oq//B/cZ/c1:t1pwEb1Rjw+SxAQ4RPgnxFaVJy5d/n
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f5ef79270fd9ad4b0bdbb076f205f43a_JaffaCakes118
Files
-
f5ef79270fd9ad4b0bdbb076f205f43a_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 11KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE