Static task
static1
Behavioral task
behavioral1
Sample
253bcc7afe799730a1b317cbb61994a4_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
253bcc7afe799730a1b317cbb61994a4_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
253bcc7afe799730a1b317cbb61994a4_JaffaCakes118
-
Size
16KB
-
MD5
253bcc7afe799730a1b317cbb61994a4
-
SHA1
e8c421df3ca155fdd554f00792f23155a37b7053
-
SHA256
c3149a05301bb51aa8464ed9b4f4b1256c5323c024d74471b17437f6f6ef63db
-
SHA512
f03d41324e4112305c3dd53488e736fde9aadafcc814d72d9ba290daad76ffe9165cf8c5b2c2649290b673c9387f67a1f88b00a7c6f54d63f2877289f4b2cec7
-
SSDEEP
192:f8jxnFS1R1Z8F274/JQtCBdH0dHRdHwdHPH1SdHK18G+j5P:f+xQ1R1Z8jxQtCBqrmuw+B
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 253bcc7afe799730a1b317cbb61994a4_JaffaCakes118
Files
-
253bcc7afe799730a1b317cbb61994a4_JaffaCakes118.exe windows:4 windows x86 arch:x86
40c3e825b117e42d1038dc7e7c689122
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetSystemDirectoryA
GetWindowsDirectoryA
GetModuleFileNameA
Sleep
CopyFileA
GetLastError
ExitProcess
CreateMutexA
OpenFile
FindClose
FindFirstFileA
advapi32
RegCloseKey
RegSetValueExA
RegOpenKeyExA
RegCreateKeyA
shell32
SHGetSpecialFolderPathA
ShellExecuteA
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 562B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE