Behavioral task
behavioral1
Sample
JaffaCakes118_e5453104d30224ac773e12cdb6aa2e35.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_e5453104d30224ac773e12cdb6aa2e35.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_e5453104d30224ac773e12cdb6aa2e35
-
Size
29KB
-
MD5
e5453104d30224ac773e12cdb6aa2e35
-
SHA1
4eba4f3a85e3c627d8e06145abf9ca1b4983b128
-
SHA256
dba8a86324bf04cc9cfd982456c1427340ab41900bee122a01f28b948654465d
-
SHA512
814ea0a2d15d5ac5cd79a0362a61e03613061e8ff493ce5165c98dc0d2a04184b16abe10a4c1eee4f31c1f08e81ef67db475a5e7ff10ea6476e8252b801e24ba
-
SSDEEP
384:bs+R5mGiTFPYRhebJwkRrVoPGZXYgCGzLzXB1OMZzDJEPGYvdbiWmAnw3/DIN9r:4AQjHJrVrCurBP5DJav9LvUe9E
Malware Config
Signatures
-
Smokeloader family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_e5453104d30224ac773e12cdb6aa2e35
Files
-
JaffaCakes118_e5453104d30224ac773e12cdb6aa2e35.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 29KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE