Static task
static1
Behavioral task
behavioral1
Sample
5379a7e1cc25424880cb9e7c267ab6fc_JaffaCakes118.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
5379a7e1cc25424880cb9e7c267ab6fc_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
5379a7e1cc25424880cb9e7c267ab6fc_JaffaCakes118
-
Size
9KB
-
MD5
5379a7e1cc25424880cb9e7c267ab6fc
-
SHA1
88721166e2e4faad3e5cf38fe54d84b4f7bdbd69
-
SHA256
1db6835c565f4bc3829b07e17542d3f141918f757c4f4e3497bcb5c9b28bed76
-
SHA512
216968e52996e1fa3c989465261b3d4c0761fb49656c5a39b0876ab550720402ea2d580ccd1fc407d50e9fd14e2a6781e6a1c39d902da982ff81b2faf531ca11
-
SSDEEP
192:TUBrKkMIzJK0BQzTvTsG6m4M0HfEr2jAO5NVqjab/i/mEnnhr:TgJKOQaW0/82f5NVqjabilnn5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5379a7e1cc25424880cb9e7c267ab6fc_JaffaCakes118
Files
-
5379a7e1cc25424880cb9e7c267ab6fc_JaffaCakes118.exe windows:4 windows x86 arch:x86
b547b1487151c8557bcbc6c24574ec6b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
ExitProcess
VirtualAlloc
Sections
.text Size: 512B - Virtual size: 100B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 128B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE