Static task
static1
Behavioral task
behavioral1
Sample
413a67cc4b9fb9fa988b2d80a7d79d7c_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
413a67cc4b9fb9fa988b2d80a7d79d7c_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
413a67cc4b9fb9fa988b2d80a7d79d7c_JaffaCakes118
-
Size
100KB
-
MD5
413a67cc4b9fb9fa988b2d80a7d79d7c
-
SHA1
80d44b81688d09da6807c0558f19af84f2425830
-
SHA256
fdb0bca116f1476773ab89dbc092035364b3ba4ff5e6657a1c86d86a6ddab960
-
SHA512
333a1d7c94f3b452799977ef1143084e3e1acec67e4b189d618f8c489e6ed85e73cb6b98d1ad3b96b98280f3e493c349e640bef3c61fa110dbaf5adaf6639d56
-
SSDEEP
1536:dnxvIo3KQKFZF+kVnc3vpgcagNhtM/5rINL+uE1e6R798LRAVIdEzU4Izgl:dyoqdnc3vjt7tMZIZ+uEY6198LuVw4I
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 413a67cc4b9fb9fa988b2d80a7d79d7c_JaffaCakes118
Files
-
413a67cc4b9fb9fa988b2d80a7d79d7c_JaffaCakes118.exe windows:4 windows x86 arch:x86
9727a02bee05db0841f8feb1d5bbbe0f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
CreateFileA
ExitProcess
GetTempPathA
WriteFile
lstrcatA
shell32
ShellExecuteA
Sections
.text Size: 98KB - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ