Static task
static1
Behavioral task
behavioral1
Sample
291f55f1fd863465ba3dd7c060c55d3b_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
291f55f1fd863465ba3dd7c060c55d3b_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
291f55f1fd863465ba3dd7c060c55d3b_JaffaCakes118
-
Size
4KB
-
MD5
291f55f1fd863465ba3dd7c060c55d3b
-
SHA1
f0b6efc24d0a9c3c662141f02a944a647b03c925
-
SHA256
a8d1c6eeb40518b6456d06fdb21d236e81f60b6c4688a2cff6adfba0b60c4878
-
SHA512
03c5dc95e6835aaa9a3b73a75f2d37ce9534fa997291eb2c9e6385878e917837f9292985d166758967428e6efb553e0ff0ee653ccab406e3637b235c7d48c393
-
SSDEEP
48:a5tZjb3gacdWij3IniUWO4JfiTnls85/YUGUwisiBcJl0+GR7x:W33NcdWij451zD/YUPwkyJl0+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 291f55f1fd863465ba3dd7c060c55d3b_JaffaCakes118
Files
-
291f55f1fd863465ba3dd7c060c55d3b_JaffaCakes118.exe windows:4 windows x86 arch:x86
6af48c7a7d63b2c8c4c1c11edc2ffdfd
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
StrToIntA
kernel32
GetFileSize
lstrcpynA
CloseHandle
CreateFileA
CreateFileMappingA
ExitProcess
FlushViewOfFile
GetCommandLineA
GetProcAddress
GetSystemTime
LoadLibraryA
MapViewOfFile
UnmapViewOfFile
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 436B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 976B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ