Static task
static1
Behavioral task
behavioral1
Sample
0ca87d7d4fa744f0052c64a41655fbbd_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
0ca87d7d4fa744f0052c64a41655fbbd_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
0ca87d7d4fa744f0052c64a41655fbbd_JaffaCakes118
-
Size
20KB
-
MD5
0ca87d7d4fa744f0052c64a41655fbbd
-
SHA1
683cb7d6ec3b407bb4f2484eaf3325ad1daf832f
-
SHA256
479b7361bf98a0eeae1b7101e2739328df84ae8cbbaf843c1bdfdbba451cf52e
-
SHA512
bfe616e4bae36db3952a7950dfd4897910a2a6659ed1d7acbc8e49308fa45c07a06f7b870ef9c6f84659e5922440d47318791e9049cc5db0c52ca6e8d4b31c69
-
SSDEEP
384:6QvqzSrUFWlVbnuiN5494L3EhU2ET8fIlyZMKL6VuSlGMCQnsZc938h9UR2:pCzEcWlVqiNK94LEGfciKol4QnsZc9Mx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0ca87d7d4fa744f0052c64a41655fbbd_JaffaCakes118
Files
-
0ca87d7d4fa744f0052c64a41655fbbd_JaffaCakes118.exe windows:4 windows x86 arch:x86
3d98884013f55c5f50425a1d4370a928
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCommandLineA
ExitProcess
GetSystemDirectoryA
GetProcAddress
LoadLibraryA
FreeLibrary
WriteFile
Sections
.text Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE