Static task
static1
Behavioral task
behavioral1
Sample
ea64b0cfebf8e410f56f23eb629a64eb_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ea64b0cfebf8e410f56f23eb629a64eb_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
ea64b0cfebf8e410f56f23eb629a64eb_JaffaCakes118
-
Size
13KB
-
MD5
ea64b0cfebf8e410f56f23eb629a64eb
-
SHA1
5a22813373bfb7f395134c288b9097abbed6b963
-
SHA256
9d72a14c9a33f1ee771e3e0e058c69796d26cbb0fc2f78c8fd03d3fd1151cfcb
-
SHA512
5b374b5ef4535875d3ba3065840285d44e9edb3387eee5d368e2bea50619c86ad200044dca7dd88ab6459ea5eb00df1de895591077d3949e4d7ae8e812fddc8a
-
SSDEEP
384:CESPbtNsPeNNnkvZ6inNB/O3gvcdtSM9ezcz9hP:d+HsPkoZTNB20KtSD6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ea64b0cfebf8e410f56f23eb629a64eb_JaffaCakes118
Files
-
ea64b0cfebf8e410f56f23eb629a64eb_JaffaCakes118.exe windows:4 windows x86 arch:x86
ee4a85a24a78b96f1f446cb4f1944dde
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
GetLastError
CloseHandle
WriteFile
CreateFileA
GetTempPathA
GetTickCount
SetLastError
GetProcAddress
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 426B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 148KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 760B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ