Static task
static1
Behavioral task
behavioral1
Sample
7107def7ab4bf98ba83be19d48064344_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
7107def7ab4bf98ba83be19d48064344_JaffaCakes118
-
Size
55KB
-
MD5
7107def7ab4bf98ba83be19d48064344
-
SHA1
b9e0db380bf8c22c9b10cbd98dfbb0e31d13cd11
-
SHA256
918f031e99dfe9d5def03500c612eb43c5774dbf01a2e5d44c577ad79275e3eb
-
SHA512
49050c8978632218c204b9cfd5590904c65a2fafea2c6186d6fc50d7acc64cb3c0e42bab69ccb696c54e0fd90799fee9a5d242fab83e09bc7aa0d10401dd23fb
-
SSDEEP
768:Y7XkKu0EiGtGidKW6s1UlqfnpnEBEaCpo8YGNI5AmbCAt0wi7HQpfjLxkJN++S:Ekg+dmpsnREWi8Yfm3ejLxkF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7107def7ab4bf98ba83be19d48064344_JaffaCakes118
Files
-
7107def7ab4bf98ba83be19d48064344_JaffaCakes118.exe windows:4 windows x86 arch:x86
9727a02bee05db0841f8feb1d5bbbe0f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
CreateFileA
ExitProcess
GetTempPathA
WriteFile
lstrcatA
shell32
ShellExecuteA
Sections
.text Size: 51KB - Virtual size: 53KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ