Static task
static1
Behavioral task
behavioral1
Sample
4497973d640855a5277a25647448ff81_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
4497973d640855a5277a25647448ff81_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4497973d640855a5277a25647448ff81_JaffaCakes118
-
Size
13KB
-
MD5
4497973d640855a5277a25647448ff81
-
SHA1
289f59b4afad4a32618b50d3748e09772daee5ee
-
SHA256
ddeb57901b15cea4180d4a6a1273b806db09ee0f9c8f14bfb9267bc51d933c83
-
SHA512
7b5fcb85abb33baeac28507dfd1c713a6949d2df99274dc595dcafc6768eb814ac912a5cb45b5d4f4ac58461b1a41070b96b0bd84cd9d00963b719c4c1d1aa8e
-
SSDEEP
384:0Rln1Tm/em1ewe9ZTzXkAQDKlF0GPpxiTQ:Kl1aJ14Tj1lFtiTQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4497973d640855a5277a25647448ff81_JaffaCakes118
Files
-
4497973d640855a5277a25647448ff81_JaffaCakes118.exe windows:4 windows x86 arch:x86
9eeefa7f6cdca34a42a6c3913e8fb403
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
GetCommandLineW
GetTempFileNameW
FreeResource
FindResourceW
LoadResource
CreateProcessW
WaitForSingleObject
GetModuleHandleW
GetTickCount
WriteFile
SizeofResource
GetFileAttributesW
GetModuleFileNameW
CreateFileW
lstrlenW
GetTempPathW
LockResource
lstrcatW
CloseHandle
shell32
SHFileOperationW
shlwapi
StrChrW
StrRChrW
msvcrt
??2@YAPAXI@Z
??3@YAXPAX@Z
malloc
free
memmove
memset
Sections
pe Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ