Static task
static1
Behavioral task
behavioral1
Sample
147828d6c2b95dcec872bc314d130c30_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
147828d6c2b95dcec872bc314d130c30_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
147828d6c2b95dcec872bc314d130c30_JaffaCakes118
-
Size
83KB
-
MD5
147828d6c2b95dcec872bc314d130c30
-
SHA1
be6a4b0b3a64685dc11c73a91de76f9ca5043407
-
SHA256
8b560cfe532a2bb315c1019fe16c8f2f47053d85d5d18fc5ae571e2623879b19
-
SHA512
32e30fd67e1f756319cd119db23e6ffcf3a51cf8f0e84d4754c7b314fa78efbe9dfd9fa1cc5b2085c745eb1f9eba3b8259058137f7fc121c81fac68638dac465
-
SSDEEP
1536:/mhuI9HbLrXKiKvrfv9qkhBxwt8fHs3/rZE58wIdRv3Lx:uhuI9HbvKiCRqkTxwmHsvrmuwIfv3Lx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 147828d6c2b95dcec872bc314d130c30_JaffaCakes118
Files
-
147828d6c2b95dcec872bc314d130c30_JaffaCakes118.exe windows:4 windows x86 arch:x86
db90084f2217f83a20176f9cc1d707a7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetConsoleScreenBufferInfo
SetConsoleTextAttribute
GetLastError
GetVersion
GetConsoleMode
SetConsoleMode
ReadConsoleInputA
GetConsoleCP
GetNumberOfConsoleInputEvents
PeekConsoleInputA
GetSystemTimeAsFileTime
GetUserDefaultLCID
GetLocaleInfoA
VirtualAlloc
VirtualQuery
HeapCreate
HeapDestroy
HeapAlloc
HeapReAlloc
HeapFree
HeapSize
HeapValidate
CreateFileA
GetFileAttributesA
MultiByteToWideChar
WideCharToMultiByte
GetConsoleOutputCP
WriteConsoleA
CloseHandle
DeleteFileA
RtlUnwind
GetStartupInfoA
GetFileType
GetStdHandle
GetCurrentProcess
DuplicateHandle
SetHandleCount
GetCommandLineA
GetModuleFileNameA
GetEnvironmentStrings
FreeEnvironmentStringsA
OutputDebugStringA
UnhandledExceptionFilter
WriteFile
ReadFile
CreateProcessA
WaitForSingleObject
GetExitCodeProcess
SetStdHandle
ExitProcess
SetConsoleCtrlHandler
TlsAlloc
TlsSetValue
EnumSystemLocalesA
TlsGetValue
GetStringTypeExA
LCMapStringA
SetFilePointer
GetSystemTime
GetTimeZoneInformation
SetEndOfFile
Sections
.text Size: 64KB - Virtual size: 63KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE