Static task
static1
Behavioral task
behavioral1
Sample
a9e7cff3752a0b8ecfbc31e5290104fd_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a9e7cff3752a0b8ecfbc31e5290104fd_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a9e7cff3752a0b8ecfbc31e5290104fd_JaffaCakes118
-
Size
73KB
-
MD5
a9e7cff3752a0b8ecfbc31e5290104fd
-
SHA1
9db102a8109bc9f4dc5d8594e5e2ce40ae2b76d3
-
SHA256
72a934071f676cc7c320c8e385d140c5ba485bb668bc69a2e59a91a52555ae68
-
SHA512
b54641302164ee16e04fa5f02607e05236548ed6cab3361f863ac09bddf8cf581270864ea8b9760f5d185696cd8fd187c8b523201b71181c92c6f8941b95595a
-
SSDEEP
192:LVd3VyOiKZ1BvWBsrM745Oor1c0d/2chOwz:/AOiKZ/WKQ74xr+0dOFc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a9e7cff3752a0b8ecfbc31e5290104fd_JaffaCakes118
Files
-
a9e7cff3752a0b8ecfbc31e5290104fd_JaffaCakes118.exe windows:4 windows x86 arch:x86
1bb07299d8e7e36e82c854f97d3d86c1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadLibraryA
WinExec
CloseHandle
ReadFile
GetFileSize
ExitProcess
CreateFileA
GetModuleFileNameA
GetModuleHandleA
GetTempPathA
user32
MessageBoxA
shell32
StrStrA
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE