Static task
static1
Behavioral task
behavioral1
Sample
ad558297cc8d3798bf571fb03bd162b8_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
ad558297cc8d3798bf571fb03bd162b8_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ad558297cc8d3798bf571fb03bd162b8_JaffaCakes118
-
Size
8KB
-
MD5
ad558297cc8d3798bf571fb03bd162b8
-
SHA1
1a9f59189c7d9817bef7bf3e4dfa09560ccf2ae7
-
SHA256
357932c237b1d70c47043beccc7beb38988ad0b236c58538214f37c319e4732d
-
SHA512
5523d2799c4829657f5db142d29cdc75d94c2e089c1eed568f3c67c71a04940050931fe4e067309e4f42e8da900ac94a6dfedceb9a8a27526a4420471ad4cff9
-
SSDEEP
96:430H0GV2/wUqGhjNIUFikCMqHWoDP70/RcK/g7I6Juv1LJgNH:+0H0G6wUqG9qMwWoDPI/Rck+I6oBJgNH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ad558297cc8d3798bf571fb03bd162b8_JaffaCakes118
Files
-
ad558297cc8d3798bf571fb03bd162b8_JaffaCakes118.exe windows:4 windows x86 arch:x86
96b2e968c8d942b1c476ffc19880a760
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
strlen
_strlwr
strcpy
strcat
strcmp
kernel32
HeapAlloc
GetCommandLineA
GetTempPathA
FindResourceA
LoadResource
LockResource
DeleteFileA
WaitForSingleObject
CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetModuleFileNameA
GetTickCount
GetProcessHeap
user32
LoadStringA
wsprintfA
GetForegroundWindow
MessageBoxA
shlwapi
StrToIntA
Sections
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ