Static task
static1
Behavioral task
behavioral1
Sample
5235d5bac67e475c402e5ae792e7fde3_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
5235d5bac67e475c402e5ae792e7fde3_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
5235d5bac67e475c402e5ae792e7fde3_JaffaCakes118
-
Size
90KB
-
MD5
5235d5bac67e475c402e5ae792e7fde3
-
SHA1
be91f114fecfce32eea33643931ddfabaf9b6e8a
-
SHA256
d8c63ed725428495453456df7227bba6cf2e90f67f6ad8cc510d657dbe46a70d
-
SHA512
4a2875400ab6d2792e4966e9bd5ac89d0781b5360d00d9d0a186ffa157325a470fe3d240581f13fc9b3d4a65061c1884eb7dda499c34fafa7a91898328e09d0e
-
SSDEEP
1536:o2K8ib9BJozqBEvrx4Mifwge1u8HSjiCw3K0aN74+BsTvPGuNTFYuu6u:oG6JeA4gV82Gu4+yTvu22J
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5235d5bac67e475c402e5ae792e7fde3_JaffaCakes118
Files
-
5235d5bac67e475c402e5ae792e7fde3_JaffaCakes118.exe windows:4 windows x86 arch:x86
b560ab57dd433b687ce099ac30565974
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
GetProcAddress
ws2_32
closesocket
Sections
Size: - Virtual size: 632KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 88KB - Virtual size: 88KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE