Static task
static1
Behavioral task
behavioral1
Sample
0bce84b24c929c564c3af73423956863_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0bce84b24c929c564c3af73423956863_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0bce84b24c929c564c3af73423956863_JaffaCakes118
-
Size
9KB
-
MD5
0bce84b24c929c564c3af73423956863
-
SHA1
9a7979ca38aeeccf7444f4cfc2fe9451f75fa93c
-
SHA256
c9bd6fe9619b081b361f007be9dd4eb469b14b6f05f8c1e4faf239a3bbfd6d38
-
SHA512
7f2bb3d53e055114d545de49444c67db94e13d736e3962271c0f5d6a1e9436cf9f6ef2a87713a84d545f595f84e19afca0c2219147589084d6428877df6849c9
-
SSDEEP
192:+mydFTUF+FMFNFuF9FLFFLFF5SDS0tKg9E05Ta9pifPmCBr4quSzNs36Gc:+myLYkmXEjbbuJXE05O9QfPFr4fSiFc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0bce84b24c929c564c3af73423956863_JaffaCakes118
Files
-
0bce84b24c929c564c3af73423956863_JaffaCakes118.exe windows:4 windows x86 arch:x86
8310f2bedfbadb2be6a64535b152b1b2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
CreateFileA
EnumResourceNamesA
ExitProcess
FindResourceA
GetTempPathA
LoadResource
LockResource
SizeofResource
WriteFile
lstrcatA
lstrcpyA
lstrlenA
shell32
ShellExecuteA
user32
CharLowerBuffA
Sections
.text Size: 512B - Virtual size: 352B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 490B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 656B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE