Static task
static1
Behavioral task
behavioral1
Sample
41ff45fdab096704549a5a1cdd7eab91_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
41ff45fdab096704549a5a1cdd7eab91_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
41ff45fdab096704549a5a1cdd7eab91_JaffaCakes118
-
Size
7KB
-
MD5
41ff45fdab096704549a5a1cdd7eab91
-
SHA1
b6acb4df2874415c7676ba6cd116f5b79904bdfd
-
SHA256
0ddb88d14110096b288c0f968f8c0a2d42f2c452984eee9a9e3a2e8b18a4d635
-
SHA512
e78f42e722f82694902eba2aff42721d2d9847a19cbb9472754fbeb4e11d4c4d51ed863bc6fbad805df99ae1136d7ec7ed3c6e3a999f1d6d29706e61a7247665
-
SSDEEP
96:HQGh6TRWcTg0V5wHrbvSRvL5H58dV9csMbj8WGKWOGh6EcSQyqkRtLHjg:HQGh6McevvGvLwpcNQOGh6E7Qazs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 41ff45fdab096704549a5a1cdd7eab91_JaffaCakes118
Files
-
41ff45fdab096704549a5a1cdd7eab91_JaffaCakes118.exe windows:4 windows x86 arch:x86
c8f468f0ff692b97e5d3e75acb48062b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
VirtualProtect
Sleep
SleepEx
GetProcAddress
LoadLibraryA
GetTickCount
CreateFileA
WriteFile
ReadFile
GetModuleHandleA
VirtualProtect
Sleep
SleepEx
GetProcAddress
LoadLibraryA
GetTickCount
CreateFileA
WriteFile
ReadFile
Sections
.text Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE