Static task
static1
Behavioral task
behavioral1
Sample
17e71539957042d9ec243bc3a48f6837_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
17e71539957042d9ec243bc3a48f6837_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
17e71539957042d9ec243bc3a48f6837_JaffaCakes118
-
Size
188KB
-
MD5
17e71539957042d9ec243bc3a48f6837
-
SHA1
5b4b8833b7727418720b5876b72ef577d077ea4c
-
SHA256
14959a4d477dc83573f8f5a778f98f6092938f78a06283cb09d060aa45275cbb
-
SHA512
aa59eb4accd404948820c64a456bbc7de3a3ca7aef0ff9a7e2cff24bedff8485ff019a1807d6ea3927a16678f95e0b2dc0b3da4ced510c30828f30a249bbd985
-
SSDEEP
3072:l02ueBBG7w/c2KXjZFl7KuNx84CBdJsET+9oHVJ3CyfEsXRMtMgM3z4:l0veBE8k5zpWsx84CBXsES9oH7CyfEsc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 17e71539957042d9ec243bc3a48f6837_JaffaCakes118
Files
-
17e71539957042d9ec243bc3a48f6837_JaffaCakes118.exe windows:4 windows x86 arch:x86
123baf1bb8fe402df13739591f0fae05
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
MessageBoxA
kernel32
GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA
Sections
.text Size: 24KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE