Static task
static1
Behavioral task
behavioral1
Sample
4a7f92df193ef1dcf20e39bdbff8101b_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
4a7f92df193ef1dcf20e39bdbff8101b_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4a7f92df193ef1dcf20e39bdbff8101b_JaffaCakes118
-
Size
160KB
-
MD5
4a7f92df193ef1dcf20e39bdbff8101b
-
SHA1
ccadc5d34b08679609c440795e96e42842f0d170
-
SHA256
65e6d61dfe73930e511d8f8d569b5ac0e14dfbc491052bec43cb662b2002534b
-
SHA512
4bde0169a3d986696c60de6ffb6330261e223ed8cc7f9147d39e9b1df1938c128a1d8b2380aad52356f9275766ad658651901037dfd22c561b58ddbed3ccf284
-
SSDEEP
3072:csCJ/nuHDHNpF4jkGYZ2ft/WMUO1Mq6Dw/aPxWKLFUY70:cs0WHLNAVr/WMUO156DG030
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4a7f92df193ef1dcf20e39bdbff8101b_JaffaCakes118
Files
-
4a7f92df193ef1dcf20e39bdbff8101b_JaffaCakes118.exe windows:4 windows x86 arch:x86
e5d7f6ce438a89c879c03565af1ea58e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
FindWindowA
FindWindowExA
PostMessageA
SendMessageA
kernel32
CloseHandle
CreateFileA
ExitProcess
GetTempPathA
GlobalFree
LocalFree
Sleep
WriteFile
lstrcatA
shell32
ShellExecuteA
Sections
.text Size: 155KB - Virtual size: 156KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ