Static task
static1
Behavioral task
behavioral1
Sample
fbae6c1a09960b1f132be2d9c9968cc3_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
fbae6c1a09960b1f132be2d9c9968cc3_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
fbae6c1a09960b1f132be2d9c9968cc3_JaffaCakes118
-
Size
83KB
-
MD5
fbae6c1a09960b1f132be2d9c9968cc3
-
SHA1
aade50b12ab76b163d8f7b600a05b6f905a1ada3
-
SHA256
af3800b4d8e0ea31d5ba457b2febfa03d9791e0b072e5f9908ff7322cbdeb341
-
SHA512
562d2951111e1757742783f5c0a34f1173b4e1470086b0174b5171122de80b87c96124e50b9d0c6f0a4d617e138b63a96bb65e395ea2b72478607f4c0a084c2b
-
SSDEEP
1536:PGVJzsBv6/3o+ce0BxXpl1FyD+SqjEErxTWDTMqhGKYIZTET8bDQ:POh86Po+VoplfyFqjBkMqhGKZTbbc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fbae6c1a09960b1f132be2d9c9968cc3_JaffaCakes118
Files
-
fbae6c1a09960b1f132be2d9c9968cc3_JaffaCakes118.exe windows:4 windows x86 arch:x86
b6bf6681a7458941c9c1dc3a5fb700ef
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetLastConsoleEventActive
SetErrorMode
GetCommandLineA
GetConsoleFontInfo
WriteFile
GlobalFindAtomA
lstrlenA
FillConsoleOutputCharacterA
SetConsoleInputExeNameA
_lclose
CopyFileA
GetProcessTimes
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.zrdata Size: 27KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE