Static task
static1
Behavioral task
behavioral1
Sample
70e540de5198e71e1af15c5e1a58e714_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
70e540de5198e71e1af15c5e1a58e714_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
70e540de5198e71e1af15c5e1a58e714_JaffaCakes118
-
Size
2.6MB
-
MD5
70e540de5198e71e1af15c5e1a58e714
-
SHA1
76a27a8e4609ca72aa3a0739999e5d0b21251f47
-
SHA256
39b54440e929c696fc0a3f9e81821c2b3da5e81ffbd54a270937b7ad085c3a90
-
SHA512
5dd06adcdc7c14684edbd930b5203134680a104d3892d1bb5a27ca402d578e43428b326712bcec6ac86f830cb3697fa616da78aacf95368f25a2cd2c11a59895
-
SSDEEP
49152:H7kDtEx8iGH6erfbenkdpKqo45R4G2AMZXudE1iSozPji7PHbjaShmb:bAcNGaeLCkTKqoIKhFZXudaiP7e7P7ja
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 70e540de5198e71e1af15c5e1a58e714_JaffaCakes118
Files
-
70e540de5198e71e1af15c5e1a58e714_JaffaCakes118.exe windows:1 windows x86 arch:x86
dbbceac39f5975d959814fd9c7244aa5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetWindowsDirectoryA
lstrcatA
_lcreat
_lwrite
_lclose
ExitProcess
shell32
ShellExecuteA
Sections
.text Size: 2.6MB - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.import Size: 512B - Virtual size: 254B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ