Static task
static1
Behavioral task
behavioral1
Sample
53189eb52268b2e5f492a6fab8a33a79_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
53189eb52268b2e5f492a6fab8a33a79_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
53189eb52268b2e5f492a6fab8a33a79_JaffaCakes118
-
Size
16KB
-
MD5
53189eb52268b2e5f492a6fab8a33a79
-
SHA1
6219c1f0cd51bf26d61f8c3df6e4110171e9ebe0
-
SHA256
bbcd0861bf3c622ef9f59f60f55e35ee9be75abebc94b52321c0b4d48cb7fcab
-
SHA512
5f15661ed6a3af58a5e16a6042f9f687dc75ca2071fed61dbeb76f3d312bbb531be63142f77c5e0d43b52b8cc47215d2124ac0226ef99dccea140491324e321c
-
SSDEEP
384:+k4h/DhtbeKyI9MyJaHsSX1CZaHLVDv1w1E1S87:2h/1t9MnX1CZgv1w1E1S87
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 53189eb52268b2e5f492a6fab8a33a79_JaffaCakes118
Files
-
53189eb52268b2e5f492a6fab8a33a79_JaffaCakes118.exe windows:4 windows x86 arch:x86
399c9f076e8dab08a1e6586d6aa70ea4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindResourceA
CreateFileA
GetTempPathA
FreeResource
CloseHandle
SizeofResource
LoadResource
WriteFile
LockResource
lstrcatA
shell32
ShellExecuteA
Sections
.text Size: 736B - Virtual size: 728B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
_INIT_ Size: 32B - Virtual size: 6B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE