Static task
static1
Behavioral task
behavioral1
Sample
182323f6edf34bf736e8fbc9019560ed_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
182323f6edf34bf736e8fbc9019560ed_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
182323f6edf34bf736e8fbc9019560ed_JaffaCakes118
-
Size
14KB
-
MD5
182323f6edf34bf736e8fbc9019560ed
-
SHA1
5e76889590c8e593b46128275cea054a2981af24
-
SHA256
bca218c07f9204c939fa260a9f7825e9aaf885d8532c665dccfd939e93823f5c
-
SHA512
e5d2423088e807838733b642b7ff2385ffc1ced4473096ac74a486557a8c42aa654f256f0b2aa6b5ec149161044c7986591cca81e13d6233c2896a9267b14ad4
-
SSDEEP
384:a5CSvS+Zv8DyZoAh3oUSaqCZR4LdK1S+FHlJuvPA3x:92WZAhqlCZKLdE1lSCx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 182323f6edf34bf736e8fbc9019560ed_JaffaCakes118
Files
-
182323f6edf34bf736e8fbc9019560ed_JaffaCakes118.exe windows:4 windows x86 arch:x86
0430f57ecef91c4afd79ff84e2cca564
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
wsprintfA
kernel32
GetTempPathA
lstrlenA
CloseHandle
CreateFileA
CreateProcessA
ExitProcess
FindResourceA
GetLastError
GetModuleFileNameA
GetModuleHandleA
GetStartupInfoA
LoadResource
LockResource
RtlZeroMemory
SetLastError
SizeofResource
WriteFile
lstrcatA
lstrcpyA
Sections
.text Size: 1024B - Virtual size: 672B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 852B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 260B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ