Static task
static1
Behavioral task
behavioral1
Sample
a208534ec28b1eedf22086cbeb646a3a_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
a208534ec28b1eedf22086cbeb646a3a_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a208534ec28b1eedf22086cbeb646a3a_JaffaCakes118
-
Size
86KB
-
MD5
a208534ec28b1eedf22086cbeb646a3a
-
SHA1
9d21fc3f716adbc21c2b5b863f940617ea49f210
-
SHA256
6beb1e4fe6f76b9d4d29a64886dd18af970f5bac1cc1abfc870a56b8322ac72b
-
SHA512
2b35d2bcfe3d87eb4b15b49ef6899a9aca1e552ece10783a9214d501caa38a58927b300c0bb7b33c30cdc6984bfd461dcb5b08a0b66025947cb2c84d56688d2c
-
SSDEEP
1536:mXVyP9rtjU0rrTtm0lo/nJbuxynZu2Q+cF9sRWLqp+o6J:n5tXTE0lo/n8yM2Q+cF9ApK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a208534ec28b1eedf22086cbeb646a3a_JaffaCakes118
Files
-
a208534ec28b1eedf22086cbeb646a3a_JaffaCakes118.exe windows:4 windows x86 arch:x86
c73b37e21876e533e96eb5dc541813e6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
WriteFile
GetTempPathA
GetWindowsDirectoryA
GetSystemDirectoryA
lstrcatA
SetFilePointer
ReadFile
GetFileSize
CreateFileA
GetModuleFileNameA
user32
wsprintfA
shell32
ShellExecuteA
msvcrt
malloc
free
Sections
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ