Static task
static1
Behavioral task
behavioral1
Sample
4153a8160825f9cc7d7d5bf62628f157_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
4153a8160825f9cc7d7d5bf62628f157_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4153a8160825f9cc7d7d5bf62628f157_JaffaCakes118
-
Size
28KB
-
MD5
4153a8160825f9cc7d7d5bf62628f157
-
SHA1
9310aa4fbfb35f3623bc70af9987a3b10b362a88
-
SHA256
2ee42aae8eb65ea39baff3e1117d6568ca9a61bff0b2de5cf1c96e1f439bfda2
-
SHA512
d801b0a8f4bc71d74ef550017c015c3d9ae9a92cd2a7f1aaa43ddae687cf05d8e22eb211a34c0314e5caaa2d139f0f8b9275286cf30ac27b1c55a801c4ace3e6
-
SSDEEP
384:Rli7NL81TFHKoQ7zrdWOk3NieqCd75h9Qj5GMVNGmm3xMQu0DolpYuMUlooY38g:RYLMHKJ7HdWN3j75h9QFGx5eC1iS7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4153a8160825f9cc7d7d5bf62628f157_JaffaCakes118
Files
-
4153a8160825f9cc7d7d5bf62628f157_JaffaCakes118.exe windows:4 windows x86 arch:x86
ff8da350dec29750d9ba34a3d8c8e318
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WriteFile
GetTickCount
GetCommandLineA
ExitProcess
GetSystemDirectoryA
GetProcAddress
LoadLibraryA
FreeLibrary
user32
wsprintfA
Sections
.text Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE