Static task
static1
Behavioral task
behavioral1
Sample
448c6bb4e95013d4cfd5a5a99fb75a16_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
448c6bb4e95013d4cfd5a5a99fb75a16_JaffaCakes118
-
Size
490KB
-
MD5
448c6bb4e95013d4cfd5a5a99fb75a16
-
SHA1
5c52d17a82ef565773acb6dc32e04eed70e631a4
-
SHA256
54efd88648db31eaa68aba71aa6a94695808cdf84c4ad8dff51b368e07ef5a7f
-
SHA512
abbfde9dbf8b5baa6f0b7517c756152f21fe7fecd4aef900fff7d6d984a6ffaec3059bf194df1bfd57d873777807601f7e8aaa8ca7551f76b38f83f0abb9510a
-
SSDEEP
12288:6F6ltd/B2MSCmmOEgX/8ACmeRbw8uV+Lhov6GKEkmHOM9p8/9lCk:64D2MN/A/8Ffblh7G7kIOML8Fkk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 448c6bb4e95013d4cfd5a5a99fb75a16_JaffaCakes118
Files
-
448c6bb4e95013d4cfd5a5a99fb75a16_JaffaCakes118.exe windows:4 windows x86 arch:x86
559398b1246f3c18c513f21a971018a0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCommandLineA
GetVersionExA
GetModuleFileNameA
WaitForSingleObject
ResumeThread
SetThreadContext
WriteProcessMemory
VirtualAllocEx
ReadProcessMemory
GetThreadContext
CreateProcessA
user32
CharLowerA
msvcrt
malloc
strstr
free
fclose
_filbuf
ftell
fseek
fopen
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE