Static task
static1
Behavioral task
behavioral1
Sample
2718e6ae4af63a0f3f6624dbefc22a63_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2718e6ae4af63a0f3f6624dbefc22a63_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2718e6ae4af63a0f3f6624dbefc22a63_JaffaCakes118
-
Size
204KB
-
MD5
2718e6ae4af63a0f3f6624dbefc22a63
-
SHA1
9c03c72d0adbf9a558771961790806bdecf2e416
-
SHA256
54509e93002cf0aa6eb661c11a445c4e3f217af73153fdeef2c701b9d7d14304
-
SHA512
140e6048e9fc5064a0510f8055a1950c54f017a30cdebfc912c9918011ab97dbcb11302f9d01a5f42044e79f23477d631b40415cf248b61537ce6a7ae211e646
-
SSDEEP
6144:QAYp1/4vRHqFs1IBG1UV4/jBlglEc6bV9D8DJ2D1m4XWU95:LS4vBqiIBG1UVi92Ec6P8oD1m4XWU95
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2718e6ae4af63a0f3f6624dbefc22a63_JaffaCakes118
Files
-
2718e6ae4af63a0f3f6624dbefc22a63_JaffaCakes118.exe windows:4 windows x86 arch:x86
4ce29553167528b6475e7170e6924a81
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ReadFile
UnmapViewOfFile
WriteFile
lstrcatA
GetTempPathA
MapViewOfFile
CreateFileMappingA
GetTickCount
CloseHandle
ExitProcess
SetFilePointer
CreateFileA
GetModuleFileNameA
user32
wsprintfA
shell32
ShellExecuteA
Sections
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ