Static task
static1
Behavioral task
behavioral1
Sample
7144831e61b759f7d9bed37630588d4c_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
7144831e61b759f7d9bed37630588d4c_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
7144831e61b759f7d9bed37630588d4c_JaffaCakes118
-
Size
20KB
-
MD5
7144831e61b759f7d9bed37630588d4c
-
SHA1
ad783e21f12365bfb6abda4c11abe05d8740db0e
-
SHA256
6c860fe7c0c90d438ee608e432a4dc757cd80e32772941c36047182f48042226
-
SHA512
72aa073279f123865f88f33d850e7a3c66da7afdac8f7b13b3dd06fe98d7a3eb526bbd0e07db2e83b483b65b427e889260727d0073a363bdc5ebc01eae092347
-
SSDEEP
384:DiCsfvZFFH+thV9gno9cYeeSNdzCQwMdsg3f1OC+a1FrwnFSGs1x3t6s:DiC4FethV6nkcLTdBwNg3fYU1FEF01xl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7144831e61b759f7d9bed37630588d4c_JaffaCakes118
Files
-
7144831e61b759f7d9bed37630588d4c_JaffaCakes118.exe windows:4 windows x86 arch:x86
f35da0feaeb1ea3121dbe4b43d43d5fa
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
StrToIntExA
kernel32.dll.
LoadLibraryA
Sleep
Sections
.text Size: 1KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 99KB - Virtual size: 99KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE