Static task
static1
Behavioral task
behavioral1
Sample
a5d60bdf0731b088104d0183b5d45bd1_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
a5d60bdf0731b088104d0183b5d45bd1_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a5d60bdf0731b088104d0183b5d45bd1_JaffaCakes118
-
Size
9KB
-
MD5
a5d60bdf0731b088104d0183b5d45bd1
-
SHA1
e8cb82293a171cf8ae22e328cd4516575579013e
-
SHA256
621e6cfcbe5d9da114b618730f06008bf9265bcc425f41260eab4ab486514805
-
SHA512
52798c148b91f51a80f89358b2a10cc59c030b0911e148e1d218e93ebc79c8350406e2b996a373fdacb756f62e1c286b467844f0a6f3817f3ce2fe5d2fda990f
-
SSDEEP
192:ZVVPP7kOhXaBNWPJqzQCXYE+kift1mn7b6:DVPP2NgTCXckil1mf6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a5d60bdf0731b088104d0183b5d45bd1_JaffaCakes118
Files
-
a5d60bdf0731b088104d0183b5d45bd1_JaffaCakes118.exe windows:4 windows x86 arch:x86
1ac8207e43ff82b5df900d53f6b7d113
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
CreateFileA
ExitProcess
GetTempPathA
WriteFile
lstrcatA
shell32
ShellExecuteA
advapi32
RegCreateKeyA
RegSetValueExA
Sections
.text Size: 8KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE