Static task
static1
Behavioral task
behavioral1
Sample
fb3d1b3aad7f0aaa82a9bfb9cde6a7e0_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
fb3d1b3aad7f0aaa82a9bfb9cde6a7e0_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
fb3d1b3aad7f0aaa82a9bfb9cde6a7e0_JaffaCakes118
-
Size
9KB
-
MD5
fb3d1b3aad7f0aaa82a9bfb9cde6a7e0
-
SHA1
42cde0bbd9c7f0aa5a2e5f7739daebd2bba81048
-
SHA256
9b660aebdf0cf3a0c6939b5aed2d95e5649c0c88bb0583fde33d136e044509da
-
SHA512
6d241408ee776b1faf996d7eda5eef240c0e44adc0a8083cf29e3a8ff5b672229f654efd1b3c452968ed17c4f5d9c161a8333ddfc34e40f8635cb03644e8ce0b
-
SSDEEP
192:ZVVPP7kOhXaBNWPJqzQCXYE+kift1mn7ba:DVPP2NgTCXckil1mfa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fb3d1b3aad7f0aaa82a9bfb9cde6a7e0_JaffaCakes118
Files
-
fb3d1b3aad7f0aaa82a9bfb9cde6a7e0_JaffaCakes118.exe windows:4 windows x86 arch:x86
1ac8207e43ff82b5df900d53f6b7d113
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
CreateFileA
ExitProcess
GetTempPathA
WriteFile
lstrcatA
shell32
ShellExecuteA
advapi32
RegCreateKeyA
RegSetValueExA
Sections
.text Size: 8KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE