Static task
static1
Behavioral task
behavioral1
Sample
309f6dbb59386e3c3d6c0bd8dfdab491_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
309f6dbb59386e3c3d6c0bd8dfdab491_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
309f6dbb59386e3c3d6c0bd8dfdab491_JaffaCakes118
-
Size
4KB
-
MD5
309f6dbb59386e3c3d6c0bd8dfdab491
-
SHA1
aef4466c2594cf99ec5652872e948677235695ae
-
SHA256
5b46ca58628f8a5e1289863b7d5bff0e59b0c1a704c43a89cba234235a39b1b1
-
SHA512
b9aa0614e5f8163807790592f3e0f9b6d350438c666a213ba763baef409d60ab700d4679cccd168ac4c14bb7866574774be9b78c51bdc94f2feaa3a82da7daca
-
SSDEEP
96:ltcrAUhcumt1Lcc8ROKvkk3jHd+sAUdU1FzL608cG:Hohcwc8QKvkk3jd+kiP608cG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 309f6dbb59386e3c3d6c0bd8dfdab491_JaffaCakes118
Files
-
309f6dbb59386e3c3d6c0bd8dfdab491_JaffaCakes118.exe windows:4 windows x86 arch:x86
3cf5d9061e3191dd88aee4819f78c4aa
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadLibraryA
CloseHandle
ReadFile
SetFilePointer
CreateFileA
GetModuleFileNameA
GetVersionExA
LocalAlloc
FreeLibrary
RaiseException
GetLastError
InterlockedExchange
user32
wsprintfA
msvcrt
??3@YAXPAX@Z
??2@YAPAXI@Z
sprintf
_itoa
rpcrt4
UuidCreateSequential
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ