Static task
static1
Behavioral task
behavioral1
Sample
256417c87d3910d4c210422d13fbfa93_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
256417c87d3910d4c210422d13fbfa93_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
256417c87d3910d4c210422d13fbfa93_JaffaCakes118
-
Size
5KB
-
MD5
256417c87d3910d4c210422d13fbfa93
-
SHA1
7a6d49ab8616236976c752331679bc2ac52b5190
-
SHA256
ee71bd8f3c33f56dfb87776a61f2c7d44f0008732e39e84cf0629d1e8479c453
-
SHA512
f6643cb179f9a4354d6c352a2f91befb36ca5e736e66d58172ca9b63e952cf1e3449cffbaa9ab81d4e25aaf7544e256da0c88f1d05cf4bbca49f4a544e73f3f5
-
SSDEEP
96:cgSqB2rCwoncyFisO/9W6rllllbwrr85L7nQc18cWEXwQ1uLod5TD:czrnon0sOFPllllbwrr85L7nR18cWEXl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 256417c87d3910d4c210422d13fbfa93_JaffaCakes118
Files
-
256417c87d3910d4c210422d13fbfa93_JaffaCakes118.exe windows:4 windows x86 arch:x86
ee4840c72cec6335c8de79589016b5c4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WriteFile
GetTempPathA
CloseHandle
ReadFile
SetFilePointer
CreateFileA
GetModuleFileNameA
shell32
ShellExecuteA
msvcrt
??2@YAPAXI@Z
??3@YAXPAX@Z
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ