Static task
static1
Behavioral task
behavioral1
Sample
719f5094aaca5d957107a206fcca0756_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
719f5094aaca5d957107a206fcca0756_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
719f5094aaca5d957107a206fcca0756_JaffaCakes118
-
Size
122KB
-
MD5
719f5094aaca5d957107a206fcca0756
-
SHA1
a0785c5963b3eb071e389718ac4424ed23e068ef
-
SHA256
1142bcbeeeb5ce4b879668325b52eab179c96df41957c4f07cc44e3f32cf7cb0
-
SHA512
727e3c983c769ec73ffb0a5bee486fff28c6c8538a93abf945797a6ecfcc1423fbccc2c6d75509afc75177ea8d2991dc05a7a5c622dca07c157b98aa02e4d19a
-
SSDEEP
3072:c4bYK7lAvHQ+HglyitiC24ekdlzOnpYsHCWbNNZ:/55A/Qvl5YPclzOnpZdj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 719f5094aaca5d957107a206fcca0756_JaffaCakes118
Files
-
719f5094aaca5d957107a206fcca0756_JaffaCakes118.exe windows:4 windows x86 arch:x86
ac02572e465a913942aa68b39fd2870d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetSystemDirectoryA
CreateProcessA
DeleteFileA
GetTempFileNameA
WaitForSingleObject
GetTempPathA
msvcrt
fclose
fwrite
fopen
strrchr
_snprintf
setupapi
SetupIterateCabinetA
Sections
.text Size: 121KB - Virtual size: 121KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 16B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ