Static task
static1
Behavioral task
behavioral1
Sample
157c8512278e9aec19131614bc0ba3fd_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
157c8512278e9aec19131614bc0ba3fd_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
157c8512278e9aec19131614bc0ba3fd_JaffaCakes118
-
Size
369KB
-
MD5
157c8512278e9aec19131614bc0ba3fd
-
SHA1
6797ddf710673b1839c3b468896aeacea5ba161a
-
SHA256
01356814b10be8d98387b188c01fd3a24af6d61bb6c9441a8fcb6fed297a0572
-
SHA512
97d2191e9bdb57edf591bd40f9ac0ee3b7149229132e0bedbb501bfe2e26c5ce495eeac76a558bb3b2b22399c9cf772970594205ec7032366567b7d5f26f01ca
-
SSDEEP
6144:lG4THmnMOpzrGikk/pbY1greCtMNBIOsYXIwep+6GPajg5NbMFoCAnGZQNng1o73:lDbmMqrGik2v277sYXIdpASiUgnGaIs3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 157c8512278e9aec19131614bc0ba3fd_JaffaCakes118
Files
-
157c8512278e9aec19131614bc0ba3fd_JaffaCakes118.exe windows:4 windows x86 arch:x86
9e49a0e7a29388b50a09fdbba3024679
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
WriteFile
CreateFileA
GetProcAddress
LoadLibraryA
GetWindowsDirectoryA
ReadFile
GetFileSize
GetModuleFileNameA
GetModuleHandleA
GetProcessHeap
HeapAlloc
GetCommandLineA
HeapFree
user32
wsprintfA
shell32
ShellExecuteA
Sections
.data Size: 369KB - Virtual size: 369KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE