Static task
static1
Behavioral task
behavioral1
Sample
62ce5e389170348a57878e825ac326c9_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
62ce5e389170348a57878e825ac326c9_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
62ce5e389170348a57878e825ac326c9_JaffaCakes118
-
Size
2.8MB
-
MD5
62ce5e389170348a57878e825ac326c9
-
SHA1
50dce560ef029a79216f8ca282b45c1686009bb4
-
SHA256
fc9e90a0b5444b6ca66d3e902919935503b8dd1262955bca40cb0cbfcf0f86c8
-
SHA512
14964c3d2eb548431cc6abbee428a3c28cff94678a33f9708ba9021df69ee534a04970c9af4a9c523cf5d3d44f37a2d5e0e27944f1216d6a67066863235911b6
-
SSDEEP
49152:itozj89QHdfcX547xAczIeM+GX2hS0zxVv9AVzPA9Y8uA/8e34inliamxr:iWz49kxBke0qS4xR9AZYu87/3nlit
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 62ce5e389170348a57878e825ac326c9_JaffaCakes118
Files
-
62ce5e389170348a57878e825ac326c9_JaffaCakes118.exe windows:4 windows x86 arch:x86
1933d7761ad9400b91f0ecdad5a33e6e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
lstrcatA
lstrcmpA
lstrlenA
CreateDirectoryA
GetTempPathA
FindClose
FindNextFileA
DeleteFileA
RemoveDirectoryA
FindFirstFileA
lstrcpyA
LocalFree
FormatMessageA
lstrcpynA
GetFileAttributesA
WriteFile
GetLastError
CreateFileA
Sleep
WaitForSingleObject
CreateProcessA
UnmapViewOfFile
GetFileSize
MapViewOfFile
CreateFileMappingA
GetModuleFileNameA
user32
MessageBoxA
wsprintfA
Sections
NicoDE Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ