Static task
static1
Behavioral task
behavioral1
Sample
820d65eed85bff1ced34cf862a952452_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
820d65eed85bff1ced34cf862a952452_JaffaCakes118.exe
Resource
win10v2004-20240730-en
General
-
Target
820d65eed85bff1ced34cf862a952452_JaffaCakes118
-
Size
5KB
-
MD5
820d65eed85bff1ced34cf862a952452
-
SHA1
e28b6025489b3bc2bce1a78ccb80940bdeb546d9
-
SHA256
ebc9b9227176ae692e51a369f859d0c7812c1eb02c94132485a11ce4ebf75130
-
SHA512
06eeeb40b05e80ea2a016f085fe3a18d84dc2b17605beabba0907bdeed7a5438ecf8abcce1f5370db5561ff2c12a547fd9f971175384c5fbfb3c24061bc629ee
-
SSDEEP
96:Z1d8PO2hbf8fYe/1N/G0gYI6UaUHKA/5sGm21eoCcy4VW4NqoVyR1pSggn:Z8PlRfKNN/hsZioCl4k4IoHgu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 820d65eed85bff1ced34cf862a952452_JaffaCakes118
Files
-
820d65eed85bff1ced34cf862a952452_JaffaCakes118.exe windows:1 windows x86 arch:x86
a384021390b285618dabb60a768eb3c9
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
Sleep
CreateFileA
GetFileSize
CreateFileMappingA
MapViewOfFile
UnmapViewOfFile
CloseHandle
CreateThread
user32
CharLowerA
wsock32
WSAStartup
socket
connect
send
recv
WSACleanup
Sections
.code Size: 4KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE