Static task
static1
Behavioral task
behavioral1
Sample
e0f0499cbcfe698eba4b56f0f388ab5f_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e0f0499cbcfe698eba4b56f0f388ab5f_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
e0f0499cbcfe698eba4b56f0f388ab5f_JaffaCakes118
-
Size
168KB
-
MD5
e0f0499cbcfe698eba4b56f0f388ab5f
-
SHA1
71bad952739849422738c6b358ebee28e094f42c
-
SHA256
2a0378a019ebdea173615e241c794b566069940189da57d5288b7d56bbd79f01
-
SHA512
cb2e1f6a405993c16c77879f32f7504b1c2709f925000388d410d5d007589054e13a2f10efc540dfda0abb619fb74ab33c985aa325e09db76622441d7b138142
-
SSDEEP
3072:9VZSWu+dqn0pPBTtFiuQ9U5BMjkaoWUYKy3Njo3JvsP6vyZzHA66APGWi:Hu+knkP5tFr5B8kD1YRuvsCv8z/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e0f0499cbcfe698eba4b56f0f388ab5f_JaffaCakes118
Files
-
e0f0499cbcfe698eba4b56f0f388ab5f_JaffaCakes118.exe windows:4 windows x86 arch:x86
1d393ccb2201e56740409fc26edefbdc
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
FindWindowA
FindWindowExA
PostMessageA
SendMessageA
kernel32
CloseHandle
CreateFileA
ExitProcess
GetLastError
GetTempPathA
GetWindowsDirectoryA
Sleep
WriteFile
lstrcatA
shell32
ShellExecuteA
Sections
.text Size: 162KB - Virtual size: 164KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ