Static task
static1
Behavioral task
behavioral1
Sample
ee9bf2c92ef0e70db1ff0e02ed895823_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ee9bf2c92ef0e70db1ff0e02ed895823_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ee9bf2c92ef0e70db1ff0e02ed895823_JaffaCakes118
-
Size
369KB
-
MD5
ee9bf2c92ef0e70db1ff0e02ed895823
-
SHA1
c3307ef2e122df5bfe92987ccba24d19402866bb
-
SHA256
6ab22f22188b49100de3d5c25ce1cf811010f248c0b845c9eba56fe6fcfbcc9b
-
SHA512
a2f4d4174a64c8452fc68cf8b812cb447904f6ad1149ec710c05579b0a7fcf246bd097bec3bc5aad8c13bf63aef88090ba947d2f8140f7a351c7bf1b87965bfa
-
SSDEEP
6144:aixue8YunMQf59V+ZXKAqjMT+fjLvjEqLNK91xt8SkNgyTiu1MSDPGp5eGApYw0:Lxue8zMa/+NmMiffYqLOlkdTb1MSS58s
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ee9bf2c92ef0e70db1ff0e02ed895823_JaffaCakes118
Files
-
ee9bf2c92ef0e70db1ff0e02ed895823_JaffaCakes118.exe windows:4 windows x86 arch:x86
ad0dfbd87e289ff934eb61a4b1ff8383
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
CreateProcessA
DeleteFileA
GetSystemDirectoryA
GetTempFileNameA
GetTempPathA
WaitForSingleObject
msvcrt
sprintf
fclose
fwrite
fopen
strrchr
_snprintf
strstr
_strlwr
setupapi
SetupIterateCabinetA
Sections
.text Size: 356KB - Virtual size: 356KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ