Static task
static1
Behavioral task
behavioral1
Sample
b051ddd0502beb82064ed5d6f1f04725_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b051ddd0502beb82064ed5d6f1f04725_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b051ddd0502beb82064ed5d6f1f04725_JaffaCakes118
-
Size
35KB
-
MD5
b051ddd0502beb82064ed5d6f1f04725
-
SHA1
b3f8cf5f5a3f816727af667a4896d31b209f60ff
-
SHA256
a640b99f135c2e3f245b1536bc17f0bc0bc917b0768336751c730a917dbf33d7
-
SHA512
3a3615f8692a3769442a313ca8d589d5e2c14887606c206472f40471645d01c291aa8fc3f8eb12cda48ae0958238445dc1282870a9db5356ea39a775d9b4a55c
-
SSDEEP
768:6zHWlWOllFEbu/IJLxb3Ng3ERzusWOrDJE5a/0S6tIjuwInoMJ:OWvOzNfusWkDB/fPjQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b051ddd0502beb82064ed5d6f1f04725_JaffaCakes118
Files
-
b051ddd0502beb82064ed5d6f1f04725_JaffaCakes118.exe windows:4 windows x86 arch:x86
a359299f874cb898424ffe422bb69045
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WriteFile
CreateFileA
SetCurrentDirectoryA
GetTempPathA
CloseHandle
shell32
ShellExecuteA
Sections
.text Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 34KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE