Static task
static1
Behavioral task
behavioral1
Sample
41835b10eb3ccd3add5d977bd79f4dbd_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
41835b10eb3ccd3add5d977bd79f4dbd_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
41835b10eb3ccd3add5d977bd79f4dbd_JaffaCakes118
-
Size
44KB
-
MD5
41835b10eb3ccd3add5d977bd79f4dbd
-
SHA1
4dff687bbfe1e146ea376df31292caf382d0b9ed
-
SHA256
d87213e3e393cc20ed6e057810c157a24c4220f192ca0dec64c79ffc4595f8ce
-
SHA512
020dd03ef976d934a8d98abe3e34151b73e6ad39f0346d3725e478f07603fa1f720c445be2f991acb503a3ae1afaa6da4f313d0bf0a85d8edb474a6ebe7e4321
-
SSDEEP
768:oRSqjdFoJBkECz+CJ7igLx0dv2anraCL+z7c8hLSGX:o75+JOECaa7zxWv1/47hLV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 41835b10eb3ccd3add5d977bd79f4dbd_JaffaCakes118
Files
-
41835b10eb3ccd3add5d977bd79f4dbd_JaffaCakes118.exe windows:4 windows x86 arch:x86
ca70489da141826fe495e15d12b7367f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
FindWindowA
FindWindowExA
PostMessageA
SendMessageA
kernel32
CloseHandle
CreateFileA
ExitProcess
GetModuleFileNameA
GetShortPathNameA
GetTempPathA
Sleep
WriteFile
lstrcatA
shell32
ShellExecuteA
Sections
.text Size: 43KB - Virtual size: 45KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE