Static task
static1
Behavioral task
behavioral1
Sample
371c05f5811b367de2c41397ffa7b864_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
371c05f5811b367de2c41397ffa7b864_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
371c05f5811b367de2c41397ffa7b864_JaffaCakes118
-
Size
58KB
-
MD5
371c05f5811b367de2c41397ffa7b864
-
SHA1
504ff802a3f58c9ed525593917b5cf792b4ebcfc
-
SHA256
caef8bb911db9ff4bed4b8cf2c623b147c6087f668222b970ffe9a06713cde56
-
SHA512
98edfc90a26dda93a1a4e1c4751e7ed95c4fe12692a3f73c119431c556e941f3a64c72573e07edf741874e635640b274f12afac5a615d20165927d67ef605d84
-
SSDEEP
1536:5dBmw9nScdLiGumowPgrSMv04B8Y70s86mQtMMMMMMgb:3BmUScdLiGu8cvfBGMtMMMMMMO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 371c05f5811b367de2c41397ffa7b864_JaffaCakes118
Files
-
371c05f5811b367de2c41397ffa7b864_JaffaCakes118.exe windows:4 windows x86 arch:x86
2e24491e858370e2e98691621f598629
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
CreateFileA
ExitProcess
GetModuleFileNameA
GetShortPathNameA
GetTempPathA
WriteFile
lstrcatA
shell32
ShellExecuteA
Sections
.text Size: 36KB - Virtual size: 38KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ