Static task
static1
Behavioral task
behavioral1
Sample
a5e8038a0d95ce993866b2483c4e9b12_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
a5e8038a0d95ce993866b2483c4e9b12_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a5e8038a0d95ce993866b2483c4e9b12_JaffaCakes118
-
Size
1KB
-
MD5
a5e8038a0d95ce993866b2483c4e9b12
-
SHA1
768e21e2496582e8167e3466f11d5cfee1ff7193
-
SHA256
655194a971e3c77ad67719e61c0fb88a6dd78b0f972e29e26120977349ec7875
-
SHA512
7c79abdeb677a7730a98075627e77b7eec8d4504439230a5f560393f2d7302399864d3015b9c3d9d9e36c47f35a75d051f1b0ea5be02577eb6b24da973833e47
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a5e8038a0d95ce993866b2483c4e9b12_JaffaCakes118
Files
-
a5e8038a0d95ce993866b2483c4e9b12_JaffaCakes118.exe windows:4 windows x86 arch:x86
0fb79e5f2450df1afa0536ed9e3f7a2a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
GetSystemDirectoryA
user32
wsprintfA
shell32
ShellExecuteExA
ws2_32
gethostname
WSAStartup
WSACleanup
gethostbyname
shlwapi
PathFileExistsA
msvcrt
_itoa
memset
strcpy
strcat
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ