Static task
static1
Behavioral task
behavioral1
Sample
68b2cf880c71ff415c040290493d0a53_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
68b2cf880c71ff415c040290493d0a53_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
68b2cf880c71ff415c040290493d0a53_JaffaCakes118
-
Size
9KB
-
MD5
68b2cf880c71ff415c040290493d0a53
-
SHA1
e13a59ad1c5d9f591283238dc9d86b75be0892ae
-
SHA256
f0f3a551e3cc788ca58fad2dc081bc6a7ead9d6ebf60f5d2493688b22307bc97
-
SHA512
2c08d44743b145408f18ee9aa0a6f082bdde318bc245555315809fa0aa0d7cc59c57de818df3faccc77cfb500027d185fb1bb9bc0d2f8304749cb0a94dfefcf4
-
SSDEEP
192:zmh61HAkmOqGc1Zl2+VAUnJxl1THs6xgzgn7jGrkcSYCL76o/k8hF6Nxa:zmh6KGcMexDTHfzLcSYQf/dhF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 68b2cf880c71ff415c040290493d0a53_JaffaCakes118
Files
-
68b2cf880c71ff415c040290493d0a53_JaffaCakes118.exe windows:4 windows x86 arch:x86
7e389dfc7dfe230e04b873161ca681ce
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
GetTickCount
WinExec
OpenProcess
WriteProcessMemory
user32
GetWindowThreadProcessId
FindWindowA
advapi32
GetUserNameA
msvcrt
exit
strcmp
strstr
Sections
.data Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE