Static task
static1
Behavioral task
behavioral1
Sample
c04d53e5964ce53a457a0d315635708e_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
c04d53e5964ce53a457a0d315635708e_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c04d53e5964ce53a457a0d315635708e_JaffaCakes118
-
Size
8KB
-
MD5
c04d53e5964ce53a457a0d315635708e
-
SHA1
0a7213b93760f9a6e0a96010f0406d0f3db56696
-
SHA256
477fb5cc871e3daee5bf10b6e9e8e08dde7c23814819ba3a93f68cb7c70660b3
-
SHA512
c49a4311d276a38b0679084a21f36d2ffcaba759d7cf6ef92f7eaeb374d1fad6111adf7ffd05ea110cd68d60f1df7cda4bbc3cf3a790563c899362ca44f35126
-
SSDEEP
192:aun8v2FlU8Q9rfxt0U2dzAUlJetxXUQLiSTj+CfjwXGfM0D:f8v2zQZMsxvLLTc2zD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c04d53e5964ce53a457a0d315635708e_JaffaCakes118
Files
-
c04d53e5964ce53a457a0d315635708e_JaffaCakes118.exe windows:4 windows x86 arch:x86
cfd7dc77ae99007adc20a6c0e3818710
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Process32Next
Process32First
CreateToolhelp32Snapshot
GetCurrentProcessId
WinExec
SetFileAttributesA
Sleep
ExitProcess
CloseHandle
WriteFile
CreateFileA
Sections
.text Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE