Static task
static1
Behavioral task
behavioral1
Sample
05d123175d03d6659aafe32b80b32338_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
05d123175d03d6659aafe32b80b32338_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
05d123175d03d6659aafe32b80b32338_JaffaCakes118
-
Size
27KB
-
MD5
05d123175d03d6659aafe32b80b32338
-
SHA1
5c2a21ea940b04337663bb35e74ec6c20ce0b141
-
SHA256
6ce1dd768a3a76c9940963be40ee92e82e9b137f80c5f4536c32bacf22f2bccd
-
SHA512
a4bf5c8675fd81080904f49406a74bed70ee1fe1e6596d4922cfc7c089c4272dd99e4e228a12de488646ff9ad1878658646f2e99426e82f530adbb2e9437ba8d
-
SSDEEP
96:7Le5LYFRYG3YYBbHBNq5imCLQNjXkQs/u26aj+B/1/W:veJYNIihZHLSX9z/1W
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 05d123175d03d6659aafe32b80b32338_JaffaCakes118
Files
-
05d123175d03d6659aafe32b80b32338_JaffaCakes118.exe windows:4 windows x86 arch:x86
87bed5a7cba00c7e1f4015f1bdae2183
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
Sections
MEW Size: - Virtual size: 84KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�uۊ�� Size: 26KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE