Static task
static1
Behavioral task
behavioral1
Sample
5431e229dd3d5821d3a5b9edb46a572e_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
5431e229dd3d5821d3a5b9edb46a572e_JaffaCakes118
-
Size
844KB
-
MD5
5431e229dd3d5821d3a5b9edb46a572e
-
SHA1
00a71ab6757fff56ad4a95092a420abf65a12e96
-
SHA256
1a1b8d08def0900abf8ebc4036eb543a247691f60cf86b41b220841b9f6d6da0
-
SHA512
2046271f5443193ffc05b88e163799c008399a20277c42f0ffce244ed417b2582adefd7b2cc4a7fc7768fb831cab2d1bcf8509f1a36adf72768fefa5e6e0f687
-
SSDEEP
24576:v8pRgoOSCnOUvCuTtbJ1ORhGLmdFzLvVISi58H:Ago3OOwTtbAAsgm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5431e229dd3d5821d3a5b9edb46a572e_JaffaCakes118
Files
-
5431e229dd3d5821d3a5b9edb46a572e_JaffaCakes118.exe windows:5 windows x86 arch:x86
f1311c60ecd2d37d5895399c900ab5fe
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateFileMappingA
Sections
lijpsebv Size: 254KB - Virtual size: 584KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 15KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
njqlpfir Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
orfkxsbj Size: 567KB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
dnzkjkvi Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE