Static task
static1
Behavioral task
behavioral1
Sample
137c988926ec8d5f11b8b5b41467b65b_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
137c988926ec8d5f11b8b5b41467b65b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
137c988926ec8d5f11b8b5b41467b65b_JaffaCakes118
-
Size
7KB
-
MD5
137c988926ec8d5f11b8b5b41467b65b
-
SHA1
4101f3049e4836d9b8199b10f493631179d961f7
-
SHA256
c0cd9061dc7c019c10415c02cccce00ae8704afa219f1549d7f31c65fa740ed4
-
SHA512
b0ed8d2968bf6da0c6844427bce13a6f0d54c2a046af4e2462d4d7b81844c94f14c5a84837e51e7fcdbcadb437ac8fc546adae6e35af0f262c420c4dce58cd5f
-
SSDEEP
96:HBVi1syC85D99wC7X4I9/L3dcgNoZFrHOiJdJDWXnXad4UP:HHi1sat7NDb9jNJNofyixDkXO4UP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 137c988926ec8d5f11b8b5b41467b65b_JaffaCakes118
Files
-
137c988926ec8d5f11b8b5b41467b65b_JaffaCakes118.exe windows:4 windows x86 arch:x86
c8f468f0ff692b97e5d3e75acb48062b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
VirtualProtect
Sleep
SleepEx
GetProcAddress
LoadLibraryA
GetTickCount
CreateFileA
WriteFile
ReadFile
GetModuleHandleA
VirtualProtect
Sleep
SleepEx
GetProcAddress
LoadLibraryA
GetTickCount
CreateFileA
WriteFile
ReadFile
Sections
.text Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE