Static task
static1
Behavioral task
behavioral1
Sample
8513c68980090887631077c384fff647_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
8513c68980090887631077c384fff647_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8513c68980090887631077c384fff647_JaffaCakes118
-
Size
28KB
-
MD5
8513c68980090887631077c384fff647
-
SHA1
28cb9f6e25be00d0f23ca0d29e2aa7426f4824f9
-
SHA256
f0be30688ce6755b01c0fb23f79dc674680b61b2e44b295413034c38dd57d581
-
SHA512
369ab92d4e27cd3a4cbe4137f92abccc4bb4932af430a1df9664b12db7c6e276c2e25481d92fb416b75b08a4de5729e3778769c9b58dc7f35878c831cf1dd064
-
SSDEEP
384:klm7uOPjbjhQl1CM16f0bXwK1QvhEZqvICPj46oGlPoNzzczE3xhnooY38B:krg3jhQl1CM1zgKstwlGlABcinSw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8513c68980090887631077c384fff647_JaffaCakes118
Files
-
8513c68980090887631077c384fff647_JaffaCakes118.exe windows:4 windows x86 arch:x86
ff8da350dec29750d9ba34a3d8c8e318
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WriteFile
GetTickCount
GetCommandLineA
ExitProcess
GetSystemDirectoryA
GetProcAddress
LoadLibraryA
FreeLibrary
user32
wsprintfA
Sections
.text Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE