Static task
static1
Behavioral task
behavioral1
Sample
05873b8074420d4a11603dfc51a37760_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
05873b8074420d4a11603dfc51a37760_JaffaCakes118.exe
Resource
win10v2004-20240910-en
General
-
Target
05873b8074420d4a11603dfc51a37760_JaffaCakes118
-
Size
138KB
-
MD5
05873b8074420d4a11603dfc51a37760
-
SHA1
472c91d221b0adde78c10c1574a70855c3cae5b8
-
SHA256
7afe2d00192d83a8304a441620d365155f6d3ba09385a5dfcd3ebfc7787bdf7c
-
SHA512
7a5341ac7162f810ca054b64a3df6cd22a661733c14733773f00ef0e4bb78e93ee4f5e8ce898c6494dd364351b4906585c408493a3c0a0469bd7c8fb174d908e
-
SSDEEP
96:0S8C+JIqm56NV9kVQV9kVRu+BcDiAHy1GNmy4FUrxXTsyXHczVO:qE6NAWAHZBcDisy1GNLxrtHmVO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 05873b8074420d4a11603dfc51a37760_JaffaCakes118
Files
-
05873b8074420d4a11603dfc51a37760_JaffaCakes118.exe windows:4 windows x86 arch:x86
1d8094677b9b809eec19846940b832b5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindNextFileA
lstrcmpA
SetFilePointer
FindFirstFileA
WinExec
GlobalFree
GlobalUnlock
WriteFile
lstrcpyA
lstrlenA
CloseHandle
GetFileSize
ReadFile
GlobalLock
GlobalAlloc
CreateFileA
GetModuleFileNameA
user32
MessageBoxA
Sections
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE