Static task
static1
Behavioral task
behavioral1
Sample
8afdf795b4fcdb300bdb29a7b4675427_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
8afdf795b4fcdb300bdb29a7b4675427_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8afdf795b4fcdb300bdb29a7b4675427_JaffaCakes118
-
Size
205KB
-
MD5
8afdf795b4fcdb300bdb29a7b4675427
-
SHA1
49094333b68fc9431213f976b5e0e201e725b1b2
-
SHA256
99627e2cc5240b980b9b5b7c7e7d667b26ec98448dda3cf4f734d6789b7fdf1c
-
SHA512
3f995c6d9f98ed4745434b8b08c70ecf62231ddd98e84e1fe6578f2109344d31a6c37996c827fc0304fcb919205cdf16d0650c9dc5d7cd3adc0c6a00644ac0c6
-
SSDEEP
3072:BB43fLtDp/w0kPv2lTlxWVeq26/L24lI2OedZhDyvON0MgQDrU8l3g3qTMW+dXw6:X4Bp47v2F2e+/q4PO4fDpeMSpvW+y6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8afdf795b4fcdb300bdb29a7b4675427_JaffaCakes118
Files
-
8afdf795b4fcdb300bdb29a7b4675427_JaffaCakes118.exe windows:4 windows x86 arch:x86
a13ee2bd542e30b8d805240c3433d2bd
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32.dll.
CloseHandle
WriteFile
CreateFileA
DeleteFileA
lstrcpyA
lstrlenA
GetTempFileNameA
GetTempPathA
GlobalAlloc
ExitProcess
GetCommandLineA
GetModuleHandleA
shell32.dll.
ShellExecuteA
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 169KB - Virtual size: 172KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 34KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ