Static task
static1
Behavioral task
behavioral1
Sample
b3aef90df8c01b413f2e71757d53aa60_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b3aef90df8c01b413f2e71757d53aa60_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b3aef90df8c01b413f2e71757d53aa60_JaffaCakes118
-
Size
44KB
-
MD5
b3aef90df8c01b413f2e71757d53aa60
-
SHA1
9e5ee5574ec4772b119e51ba08803687a9b31b60
-
SHA256
c65fe746a47fe5980f69d969b0972c04dfe81ace5ac61670384b1c632ae62a27
-
SHA512
098a35fb132095a125049be216d417dd9f2e82f35065a7b22e0feb1331c647901340494a04ae5da37e432517ce5750155411a564a4c64d87c5c16df64e5c76f0
-
SSDEEP
768:17mZ9wSndIf65gcAcizIdqGI2dm34y65eR+ldH/JBACoN3mrW:1G2SdISqT2dmr6i85JB+WrW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b3aef90df8c01b413f2e71757d53aa60_JaffaCakes118
Files
-
b3aef90df8c01b413f2e71757d53aa60_JaffaCakes118.exe windows:4 windows x86 arch:x86
9e49a0e7a29388b50a09fdbba3024679
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
WriteFile
CreateFileA
GetProcAddress
LoadLibraryA
GetWindowsDirectoryA
ReadFile
GetFileSize
GetModuleFileNameA
GetModuleHandleA
GetProcessHeap
HeapAlloc
GetCommandLineA
HeapFree
user32
wsprintfA
shell32
ShellExecuteA
Sections
.data Size: 43KB - Virtual size: 43KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE