Static task
static1
Behavioral task
behavioral1
Sample
18ce2c57c8591658293fd85224f86723_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
18ce2c57c8591658293fd85224f86723_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
18ce2c57c8591658293fd85224f86723_JaffaCakes118
-
Size
3.7MB
-
MD5
18ce2c57c8591658293fd85224f86723
-
SHA1
feac2debe9698af5caccf2acc38e418d6ef3d535
-
SHA256
946fba09652d231514c64021f0fc3b0b220471dcb4e04df909ebb24c9377660e
-
SHA512
1956be90d032b161cdee73e17ddbd400ced14f6df6f9da45900c0e96d9ae339bb1742d530e86182f1b42cbf8688e381303a0cae31ec56a73e8515ffadf327b32
-
SSDEEP
98304:lEQsBk+HJkNOzw6ivhDZNHccJtrkEQsBk+HJkNOzw6ivhDZNHccJtrr:lEqcsBd1ZmSJkEqcsBd1ZmSJr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 18ce2c57c8591658293fd85224f86723_JaffaCakes118
Files
-
18ce2c57c8591658293fd85224f86723_JaffaCakes118.exe windows:4 windows x86 arch:x86
24476665fc64c5bd2f686ee32b80ff80
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
shell32
ShellExecuteA
kernel32
GetShortPathNameA
CopyFileA
GetSystemDirectoryA
GetModuleFileNameA
WinExec
msvcrt
exit
rewind
fclose
getc
fopen
??2@YAPAXI@Z
putc
fseek
fprintf
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.ultra Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ