Static task
static1
Behavioral task
behavioral1
Sample
f128cf10d7512809add3ba377e463a1b_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f128cf10d7512809add3ba377e463a1b_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f128cf10d7512809add3ba377e463a1b_JaffaCakes118
-
Size
76KB
-
MD5
f128cf10d7512809add3ba377e463a1b
-
SHA1
2a450851ffe95907c6ca5b1a1fb1369980ab75c0
-
SHA256
14cbd9a3ff87545ebe5b4d0c5651dc59e1cdb6d8ab1774b95151bf840fe12a58
-
SHA512
859a92dcb93ab97042baeaf3cc8846eb39e3fe34b8404474d53a2524e849908b4c69bb8f5d6fd7a1ca385e73dbc3d208432ad34de566f7951fb84c2d6b278b9f
-
SSDEEP
1536:MiREBK34im5laFlz5tWFD6hcFw3gE+MEewyVKvThgpjVrs2ryrd1vUQuq6:lRE+m/arCD6hcFw39kxlCHs2qo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f128cf10d7512809add3ba377e463a1b_JaffaCakes118
Files
-
f128cf10d7512809add3ba377e463a1b_JaffaCakes118.exe windows:4 windows x86 arch:x86
c1e1a2cbc0cd3a87f33c1b0c1dbf4a33
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetCurrentDirectoryA
GetCompressedFileSizeA
FindVolumeMountPointClose
GetConsoleDisplayMode
GetNumaNodeProcessorMask
GetSystemWow64DirectoryW
SetVolumeMountPointW
GetConsoleAliasesLengthA
SetClientTimeZoneInformation
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.brdata Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE