Static task
static1
Behavioral task
behavioral1
Sample
e89c53764c8844359928779161261efe_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
e89c53764c8844359928779161261efe_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
e89c53764c8844359928779161261efe_JaffaCakes118
-
Size
57KB
-
MD5
e89c53764c8844359928779161261efe
-
SHA1
ac91d618c4ab384a24b595a71fb4454bee04c0a3
-
SHA256
cb67312fcfee11e99b55f6a9ddf45922ec0d8f88f23f248350cc12dcb98701d9
-
SHA512
0b667600c3930d83df75e727972bbf75081e49d81067f414a6be83c9a9cd28b56cbd7cce6e2989018353471d5974f08ae6ee766bbf9a7603b65838fec9a83508
-
SSDEEP
768:fxSoPB9yJx9Q+izKuxtoh8AuM8RvWAtbFs1HIGv4cse5fiVaKpKcl/P9yTB0hleq:fxSopom+iuki8y8xWAtNGeppzCMKY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e89c53764c8844359928779161261efe_JaffaCakes118
Files
-
e89c53764c8844359928779161261efe_JaffaCakes118.exe windows:4 windows x86 arch:x86
a3411f869be92c4f553032c30c46aa06
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcmpiA
ReadFile
SetFilePointer
CreateFileA
lstrcpyA
WriteFile
ExitProcess
CloseHandle
GetShortPathNameA
GetModuleFileNameA
lstrcatA
GetTempPathA
TerminateProcess
GetLocalTime
Sections
.data Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 47KB - Virtual size: 47KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ