Static task
static1
Behavioral task
behavioral1
Sample
aa72c8751f7c3267228a8491e357a9be_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
aa72c8751f7c3267228a8491e357a9be_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
aa72c8751f7c3267228a8491e357a9be_JaffaCakes118
-
Size
7KB
-
MD5
aa72c8751f7c3267228a8491e357a9be
-
SHA1
27c593ece2554c6a274b0eb762eabbc8dc26ce5f
-
SHA256
cbfcfef9755576a95c83fe150146ece7b275626be4bb308ef4367b71479db218
-
SHA512
a947d1e8bf06d70020e61966d9154f60e31f6dc79b67cf90b01356f4a84d49e374e195bf7076a257e1efb8dd7946a6b7ef323202283d7d958383d3c0775a6913
-
SSDEEP
96:Z1ZcErLy3vkX3Z2KrFJfwSvGzsY+YpeH2BT+y/d7toF13qL:9trL4Ap2oGSvGzsYdeH2By0d7Cs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource aa72c8751f7c3267228a8491e357a9be_JaffaCakes118
Files
-
aa72c8751f7c3267228a8491e357a9be_JaffaCakes118.exe windows:1 windows x86 arch:x86
1f186b45e831090533a6316a369f7d4f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
_lclose
ExitProcess
GetCommandLineA
GetCurrentDirectoryA
GetFileInformationByHandle
GetModuleFileNameA
OpenFile
ReadFile
SetCurrentDirectoryA
SetErrorMode
SetFilePointer
shell32
ShellExecuteA
ShellExecuteExA
user32
FindWindowA
FindWindowExA
PostMessageA
Sections
.rsrc Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE