Static task
static1
Behavioral task
behavioral1
Sample
089cee40415766772688f5f7ba8e20dd_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
089cee40415766772688f5f7ba8e20dd_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
089cee40415766772688f5f7ba8e20dd_JaffaCakes118
-
Size
3KB
-
MD5
089cee40415766772688f5f7ba8e20dd
-
SHA1
6523a6ec7342b0790799114f7545a048849afbe5
-
SHA256
f8e48f838ddd663a326bece221e5986484f01eebbb5958e5bef662199f63bd8c
-
SHA512
c4e3ac013fdc970debe8c474a0c17c739e0a3731d102ad429e460dacf3dcc72c57ae2278ef196ab6f1ca84dcca472fd20fba43efa4b1feed90ec4c6f8b6c1503
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 089cee40415766772688f5f7ba8e20dd_JaffaCakes118
Files
-
089cee40415766772688f5f7ba8e20dd_JaffaCakes118.exe windows:4 windows x86 arch:x86
b7c2d38bf4c6fff1f3422697bc181878
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
urlmon
URLDownloadToFileA
kernel32
ExitProcess
GetProcessHeap
CloseHandle
CreateProcessA
lstrcatA
GetSystemDirectoryA
Sleep
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
HeapAlloc
Sections
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE