Static task
static1
Behavioral task
behavioral1
Sample
300d1e73285a44b9239f3d71fa16b71a_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
300d1e73285a44b9239f3d71fa16b71a_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
300d1e73285a44b9239f3d71fa16b71a_JaffaCakes118
-
Size
23KB
-
MD5
300d1e73285a44b9239f3d71fa16b71a
-
SHA1
d17ff6d0cbe268f9f35ffc62eb452e3d95d8bf8f
-
SHA256
2c483f601764b76ac3e9546f3213b7d8528b32f6a0a039d154718f972973e57f
-
SHA512
0f1ee200db06f2c548ad439e7886ca769acad3d16d2fe02a8c3a6b0b6f57fc488905bacc9e78cf9ca4fce64b5ff2ae61deac2cc4ae44d5e28aceb9cac3f8cdc1
-
SSDEEP
384:422Z3fQuT1tdmitwP1opSRNHYYT8/tIjZPShbFIr6IgV8NqF:eJpT1zmAy1jqYTIt2+JXmNqF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 300d1e73285a44b9239f3d71fa16b71a_JaffaCakes118
Files
-
300d1e73285a44b9239f3d71fa16b71a_JaffaCakes118.exe windows:4 windows x86 arch:x86
35347c755519b7d0311887e16c6cc7d2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
shell32
SHAddToRecentDocs
StrRChrIA
StrStrIA
kernel32
CreatePipe
TerminateProcess
VirtualProtect
Sections
.text Size: 13KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ