Static task
static1
Behavioral task
behavioral1
Sample
9436bd41769bf19fd3e19a1b246fdf05_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
9436bd41769bf19fd3e19a1b246fdf05_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
9436bd41769bf19fd3e19a1b246fdf05_JaffaCakes118
-
Size
17KB
-
MD5
9436bd41769bf19fd3e19a1b246fdf05
-
SHA1
539672b031d871415ddcb64ea3db863c93bdff03
-
SHA256
1466aba2e7d08861431a44652d3ca98470436de2e88fc985a09813c1dfa08f3f
-
SHA512
d42b17b9fc2d8283878b882a75f43dd51f15a9654eba79d0c7fd24ec639e544db52d0b8cf4a04dc315da5d9a2fb3f71cae7c9f7058a57c5d503f91acc3b0520f
-
SSDEEP
384:0W84SLYQiW9GDkKCqsWyEJZqYpKxLA/sDWJl9g:VnQiW9GgK9sLSqcEUrH9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9436bd41769bf19fd3e19a1b246fdf05_JaffaCakes118
Files
-
9436bd41769bf19fd3e19a1b246fdf05_JaffaCakes118.exe windows:4 windows x86 arch:x86
b7c44687adf823902895f851d1e51fda
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
CreateFileA
ExitProcess
GetSystemDirectoryA
WinExec
WriteFile
wininet
InternetCloseHandle
InternetOpenA
InternetOpenUrlA
InternetReadFile
user32
wsprintfA
Sections
PESEC0 Size: 582B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 466B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ