Static task
static1
Behavioral task
behavioral1
Sample
f604b52a9e04121b9d49b5e55e42774d_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f604b52a9e04121b9d49b5e55e42774d_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f604b52a9e04121b9d49b5e55e42774d_JaffaCakes118
-
Size
76KB
-
MD5
f604b52a9e04121b9d49b5e55e42774d
-
SHA1
f0132e95d1c477ab6c9f3b907c83641fc821b454
-
SHA256
d4c91ae686bd09eabbd0b4a5500b456c450915c0123d0230e039a07031d47d71
-
SHA512
c5b93f53a03423efca5190fc56c8eca9a3847aeef8a2c971934312db20885803287cea912d773befd1ea6cfa0dde9427b86f974ccd1c8cc7abb337c081a80171
-
SSDEEP
1536:zUNiU9/QGFyniupLwLt+jDLYd4eYcy9pjVrs2ryrd1vUQuq6:CiU9/Q6Aiud5DLYdlQHs2qo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f604b52a9e04121b9d49b5e55e42774d_JaffaCakes118
Files
-
f604b52a9e04121b9d49b5e55e42774d_JaffaCakes118.exe windows:4 windows x86 arch:x86
b2f181e0cc759a7dc5ecfe028f7a8ffe
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WaitForMultipleObjects
CreateConsoleScreenBuffer
LocalHandle
SetEndOfFile
GetConsoleKeyboardLayoutNameA
SetHandleInformation
MoveFileA
SetCalendarInfoW
GetProfileSectionA
SetFilePointerEx
GetConsoleInputWaitHandle
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.brdata Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE