Static task
static1
Behavioral task
behavioral1
Sample
d03870bf0b0a04112a9a1e3bf0067231_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d03870bf0b0a04112a9a1e3bf0067231_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d03870bf0b0a04112a9a1e3bf0067231_JaffaCakes118
-
Size
6KB
-
MD5
d03870bf0b0a04112a9a1e3bf0067231
-
SHA1
0508e06d5162e155e1369c6ea73a580fde0bc9aa
-
SHA256
6b26cdd30bb56159c540216c8155a7fdcd055659e03629d5efc3ac120f1853d3
-
SHA512
747f655d84db4c3c91612e33a8f01eea2ec632aa4c39fe0abbd46d78f1690190030a2d527a6b9dffaa25eb8b89aa474fe8ea5a6149f9d85c76e9f745c5e12b08
-
SSDEEP
24:etGSh0dRBPWKMWKkRdoBMho6IAQviBTyXygWk0/flGbNw3lPEigsgUtWUNw3:62T0AhdoBMho60gyi/AbNwVHBW8w
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d03870bf0b0a04112a9a1e3bf0067231_JaffaCakes118
Files
-
d03870bf0b0a04112a9a1e3bf0067231_JaffaCakes118.exe windows:4 windows x86 arch:x86
e2bf10fcb6977cb97a081d462a036b6c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
CreateFileA
ExitProcess
GetModuleFileNameA
GetTempPathA
ReadFile
SetFilePointer
WriteFile
lstrcatA
shell32
ShellExecuteA
Sections
.text Size: 1KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE