Static task
static1
Behavioral task
behavioral1
Sample
fa5025741984a5abec12cf5f9599431a_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
fa5025741984a5abec12cf5f9599431a_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
fa5025741984a5abec12cf5f9599431a_JaffaCakes118
-
Size
41KB
-
MD5
fa5025741984a5abec12cf5f9599431a
-
SHA1
fd2e05dd2e9a60529e336851e2b20da8d1f63097
-
SHA256
c18ee5c491151ec9e83b9954c370749881fd446463febe8101231b94489022b1
-
SHA512
e3ce8229c2d8ac560e41f82c0d562a81e94581f1cf06d4130769ae4cdb218478f05a4a60d89674b7f58c7fa7cf5791b2715a3493827295209777ef88f14dbb03
-
SSDEEP
768:Zi1K4NNO91gtKZh7EJhpjSkFgcu2nSxxvHS+A7M62RmX97F3HRZn:Z5iO915P7S7fgbESnfS+A7M6Uo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fa5025741984a5abec12cf5f9599431a_JaffaCakes118
Files
-
fa5025741984a5abec12cf5f9599431a_JaffaCakes118.exe windows:4 windows x86 arch:x86
4c71388e384fa8d26ecec1f0da9a7e67
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
urlmon
URLDownloadToCacheFileA
ReleaseBindInfo
CompareSecurityIds
DllRegisterServerEx
ntdll
LdrShutdownThread
ZwSetInformationProcess
KiUserCallbackDispatcher
LdrLockLoaderLock
Sections
.text Size: 40KB - Virtual size: 49KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE