Static task
static1
Behavioral task
behavioral1
Sample
659d6716df9ebe827845e8d70e0e3d8d_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
659d6716df9ebe827845e8d70e0e3d8d_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
659d6716df9ebe827845e8d70e0e3d8d_JaffaCakes118
-
Size
8KB
-
MD5
659d6716df9ebe827845e8d70e0e3d8d
-
SHA1
a6f04540eb4bee771e16ac27f532bc9c8ba5bc9c
-
SHA256
1e8683734c66b0bd554a7016f40d12fd704ae8b73ce77dcb873a82190964fd55
-
SHA512
2367278f42d565d56591576b34010ed4e025db1d9c3022a56f27f3518f487ecf08245ff16fd4de7ba6d1b8df9db465726e66befced42711ab137eb4a8814db36
-
SSDEEP
24:UGSgEwu/oP8DTwlkNB41Nq4hMlHtNsQXlMyETU9PdRJy27vHxFDBvX6Yo7BhnYBQ:eF5S5lElNNjMyEcP9DBvXho7Bhnqkw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 659d6716df9ebe827845e8d70e0e3d8d_JaffaCakes118
Files
-
659d6716df9ebe827845e8d70e0e3d8d_JaffaCakes118.exe windows:4 windows x86 arch:x86
acc485e7b7b38e4c639a91de3e9d8388
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateProcessW
GetSystemDirectoryW
GetModuleFileNameW
MoveFileExW
GetCurrentDirectoryW
ExitProcess
user32
MessageBoxW
msvcrt
wcslen
_wfopen
wcscat
free
fclose
fwrite
malloc
fread
fseek
_wstat
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ