Static task
static1
Behavioral task
behavioral1
Sample
3123ae4947ca1f43b9bc2ef26eda15c0_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
3123ae4947ca1f43b9bc2ef26eda15c0_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3123ae4947ca1f43b9bc2ef26eda15c0_JaffaCakes118
-
Size
381KB
-
MD5
3123ae4947ca1f43b9bc2ef26eda15c0
-
SHA1
50b68715846d1955123662194d2d74d4a176dc35
-
SHA256
82ddd75111599b7e4788e8be47b9c8a974b54352a535d0dd18d2906b20c69da3
-
SHA512
e32f0e2f9b12879a4da1d6d1aca1e6f3320c95418ff08052bd82a0b0cec377e76fa9de3ef307a3838b5f78ee67f53f353c6981097a6b0bc147c2c8ef91b18d97
-
SSDEEP
6144:LNXwq9njmUhylk9N9ZAjbBNBa0shQzkZlWh8p2yr4Vy62DBE7KWQ9eJQXwXuZJnc:pXwqrhyl09Z2BSCzkZlEAr4bQBKK+B+g
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3123ae4947ca1f43b9bc2ef26eda15c0_JaffaCakes118
Files
-
3123ae4947ca1f43b9bc2ef26eda15c0_JaffaCakes118.exe windows:4 windows x86 arch:x86
ad0dfbd87e289ff934eb61a4b1ff8383
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
CreateProcessA
DeleteFileA
GetSystemDirectoryA
GetTempFileNameA
GetTempPathA
WaitForSingleObject
msvcrt
sprintf
fclose
fwrite
fopen
strrchr
_snprintf
strstr
_strlwr
setupapi
SetupIterateCabinetA
Sections
.text Size: 379KB - Virtual size: 379KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ