Static task
static1
Behavioral task
behavioral1
Sample
300e9762fee4858b7bb6636ba0f19880_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
300e9762fee4858b7bb6636ba0f19880_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
300e9762fee4858b7bb6636ba0f19880_JaffaCakes118
-
Size
4KB
-
MD5
300e9762fee4858b7bb6636ba0f19880
-
SHA1
432803a0fa361fbdd0faf6f0bbd3862866a87475
-
SHA256
e32e48c0749c0baaa25b99480ad57e85b0592d54f761df969a3363a7731f92c0
-
SHA512
264ef1baa84fbfa92f242c63255b4d99f0a1e676b651291011f2fbc63bb9bde5d0ee28a9c29ae18ba985870e919eebf3345b7c40ecbe47bda2e18c420cab6b95
-
SSDEEP
48:OEPbRN3TFmehkYmqfYkiiaSndSn7TnudoBA1:nPtNjdeYBfYkiknAn7TuqK1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 300e9762fee4858b7bb6636ba0f19880_JaffaCakes118
Files
-
300e9762fee4858b7bb6636ba0f19880_JaffaCakes118.exe windows:1 windows x86 arch:x86
d7ca3928b2d21d557f3cc10a8c815587
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
WriteFile
SetFilePointer
lstrcmpiA
CloseHandle
CopyFileA
CreateFileA
ExitProcess
GetModuleFileNameA
GetSystemDirectoryA
ReadFile
advapi32
RegQueryValueExA
RegSetValueExA
RegCreateKeyExA
RegCloseKey
Sections
CODE Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ