Static task
static1
Behavioral task
behavioral1
Sample
a5fe37d4421f9e35479838379c2e484e_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
a5fe37d4421f9e35479838379c2e484e_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a5fe37d4421f9e35479838379c2e484e_JaffaCakes118
-
Size
46KB
-
MD5
a5fe37d4421f9e35479838379c2e484e
-
SHA1
21cb0f833c8378500df5696c5521d3f266ae266f
-
SHA256
73ceb87bb1324ce1d09280ac9d6f7d3bb01168e30c4650799c462d649e54615c
-
SHA512
5e72dfc3855e084213d812b56b9c47d399324b37497b05070d07f10b0d31596af500a69cf05bedfc5ffa22cfa26a900c0cc5cd794719ac15aff715f0804817d8
-
SSDEEP
768:P9egsoj1MB3x3oMgMjKMhDR/qzAt8PAE+TEYAm1ASl+40qQb4RWXsfRdMwLKb:P9egs+1RMftyV+TBGAQb44XsfRdMwOb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a5fe37d4421f9e35479838379c2e484e_JaffaCakes118
Files
-
a5fe37d4421f9e35479838379c2e484e_JaffaCakes118.exe windows:4 windows x86 arch:x86
a618f2cbac0ad90c3937be52939d745b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
WriteFile
CloseHandle
CreateFileA
Sleep
Sections
.text Size: 45KB - Virtual size: 45KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE