Static task
static1
Behavioral task
behavioral1
Sample
b1208af7d2eecc1a9f166571bf663297_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b1208af7d2eecc1a9f166571bf663297_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b1208af7d2eecc1a9f166571bf663297_JaffaCakes118
-
Size
8KB
-
MD5
b1208af7d2eecc1a9f166571bf663297
-
SHA1
c95735d09516b44b9775540e9c16aae91a343676
-
SHA256
d4bd801a87c3242a731e264742f2f1dc12b21f77e134929c6be57d4426bbca1d
-
SHA512
4e677e1d020b35fe6c1fb8081be63d2f43b581ad76f55287fe57ee4a9da2f27b69917cb66118ca36722f608efca28817222111a3767378f61d6134e82b37f458
-
SSDEEP
96:YK7bxMWGMPfR6++u4GbCuN7mBm1DBv6A71Vl7sDQkUy0Mk+Y39Zz4BlGNAjz1viP:rM1gfoGOu+m1lv6nDswY34nesRve8y
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b1208af7d2eecc1a9f166571bf663297_JaffaCakes118
Files
-
b1208af7d2eecc1a9f166571bf663297_JaffaCakes118.exe windows:4 windows x86 arch:x86
cfd7dc77ae99007adc20a6c0e3818710
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Process32Next
Process32First
CreateToolhelp32Snapshot
GetCurrentProcessId
WinExec
SetFileAttributesA
Sleep
ExitProcess
CloseHandle
WriteFile
CreateFileA
Sections
.text Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE