Static task
static1
Behavioral task
behavioral1
Sample
29f1ed111e52aa0ac14c9daa8c907c6e_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
29f1ed111e52aa0ac14c9daa8c907c6e_JaffaCakes118
-
Size
5KB
-
MD5
29f1ed111e52aa0ac14c9daa8c907c6e
-
SHA1
af053cec2e230f3b205107b484b8ea95ac8544ed
-
SHA256
e9c6be1d1df7c4402a64910fc5d7fe5e5b5902b5cb3dc0bfaf011d9eb32e5408
-
SHA512
d00ffff282997635cac63627c11d32a4293aee34466cb088a3dd816e37b7406e0b898de4c798a4b6f943f0312aa6b81cb689f3b5e188b023b6810ec4fe9b7159
-
SSDEEP
48:ZvtWxUKQZVh7JIzIZ6NceyAVTvEHHAH7dhNAMoBAX:Z1aQZVVq8UNcpA2n47hcK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 29f1ed111e52aa0ac14c9daa8c907c6e_JaffaCakes118
Files
-
29f1ed111e52aa0ac14c9daa8c907c6e_JaffaCakes118.exe windows:1 windows x86 arch:x86
ee78b2c855deae629473ebfbe5610f07
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
CharToOemA
kernel32
CloseHandle
CreateFileA
DeleteFileA
ExitProcess
GetModuleFileNameA
GetProcAddress
GlobalAlloc
GlobalFree
GlobalLock
GlobalUnlock
LoadLibraryA
ReadFile
Sleep
WinExec
WriteFile
lstrcatA
lstrlenA
Sections
.code Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 496B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE