Static task
static1
Behavioral task
behavioral1
Sample
a90f9b7a91248a6740366912a0c615a8_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
a90f9b7a91248a6740366912a0c615a8_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a90f9b7a91248a6740366912a0c615a8_JaffaCakes118
-
Size
5KB
-
MD5
a90f9b7a91248a6740366912a0c615a8
-
SHA1
5a66e56c11ca2f708ddde3f197efb3400c443376
-
SHA256
14a1181aa3477f95c9cdefe23296e5659041e5515d5777156e3b70ccd25ac4e1
-
SHA512
fcfc3e29b27d8980d2b8c87a86b52c829eb829afab10cd6bd17bf43b696baee452e94b7a672855d751e3fc64621bf581280eef63ed5d4f71254f91b46e6b15fa
-
SSDEEP
96:0Px9jpZ11VnNa8y5aHK8mP1rem1eC7e92FNnBcbhhBXrBYnCLvaV:Ux9jpZ11VDPq8mtrem1eC7e9ynBcbhhU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a90f9b7a91248a6740366912a0c615a8_JaffaCakes118
Files
-
a90f9b7a91248a6740366912a0c615a8_JaffaCakes118.exe windows:4 windows x86 arch:x86
9eeefa7f6cdca34a42a6c3913e8fb403
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
GetCommandLineW
GetTempFileNameW
FreeResource
FindResourceW
LoadResource
CreateProcessW
WaitForSingleObject
GetModuleHandleW
GetTickCount
WriteFile
SizeofResource
GetFileAttributesW
GetModuleFileNameW
CreateFileW
lstrlenW
GetTempPathW
LockResource
lstrcatW
CloseHandle
shell32
SHFileOperationW
shlwapi
StrChrW
StrRChrW
msvcrt
??2@YAPAXI@Z
??3@YAXPAX@Z
malloc
free
memmove
memset
Sections
pe Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ