Static task
static1
Behavioral task
behavioral1
Sample
ad26ee00ba873f076e0a7668578fec46_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
ad26ee00ba873f076e0a7668578fec46_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ad26ee00ba873f076e0a7668578fec46_JaffaCakes118
-
Size
31KB
-
MD5
ad26ee00ba873f076e0a7668578fec46
-
SHA1
d2d9e7dfb5c2a1191585fce62eebad8c75eb9c31
-
SHA256
047d5c39e271fe39fc6caa15f86c6132f3bfd6664cc1bcf80d7e35677335d5f1
-
SHA512
e3674b9c278c61fc2bc4b14e5a9b7df0b6834efb14f9bff5a8cf0f7651c2484cd6c2816bc42145324201aa3910f22eabee540811d51d678e5de714bddd148f39
-
SSDEEP
768:IDWYy4YGjLpdurrKc3S0QxT3FNsqE9iIqpM:shrirTi0o5ipqK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ad26ee00ba873f076e0a7668578fec46_JaffaCakes118
Files
-
ad26ee00ba873f076e0a7668578fec46_JaffaCakes118.exe windows:4 windows x86 arch:x86
e66998419ee2712a62fffb31400af33b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
CreateFileA
CreateProcessA
DeleteFileA
FindResourceA
GetCurrentDirectoryA
GetCurrentProcess
GetEnvironmentVariableA
GetModuleFileNameA
GetShortPathNameA
GetStartupInfoA
GlobalAlloc
GlobalFree
LoadResource
LockResource
ReadFile
ResumeThread
SetFileAttributesA
SetFilePointer
SetPriorityClass
SizeofResource
WaitForSingleObject
WriteFile
lstrcatA
user32
wsprintfA
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 732B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ