Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_8636b780528130d1833d3dd93f6fa385.exe
Resource
win7-20250207-en
Behavioral task
behavioral2
Sample
JaffaCakes118_8636b780528130d1833d3dd93f6fa385.exe
Resource
win10v2004-20250314-en
General
-
Target
JaffaCakes118_8636b780528130d1833d3dd93f6fa385
-
Size
2.9MB
-
MD5
8636b780528130d1833d3dd93f6fa385
-
SHA1
a3b10fc211b81deaa6e91ad7e27141c87bfa876d
-
SHA256
323ac939098c774dc54414c346aab1009496647a5f007e501b9b7bd444e9ce5c
-
SHA512
8b66d9f74b1cc463e67805d5b4e5990f3a9c19cf6bcd4a1d4e9ac9453b4402efc2c7775a05aab51b42bc0c84d61d778b5f63d9b1298b7415f132f20bd9433983
-
SSDEEP
49152:t+O2cRgrD1vKPtriRpGQLrTvD1cpfFnQMp8kryu9znBMlDcUIk1RQY4lW4ZlYJTi:+cRShYr9kTvD+vnQI8kdzBMEk1RR4lWs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_8636b780528130d1833d3dd93f6fa385
Files
-
JaffaCakes118_8636b780528130d1833d3dd93f6fa385.exe windows:4 windows x86 arch:x86
a794bbb7a400a12a67d7708c35df1192
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
CreateFileA
ExitProcess
GetCommandLineA
GetFileSize
GetSystemDirectoryA
GetTempPathA
GetWindowsDirectoryA
GlobalAlloc
ReadFile
SetFileAttributesA
SetFilePointer
WriteFile
lstrcatA
lstrcpyA
lstrlenA
shell32
ShellExecuteA
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 928B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE