Static task
static1
Behavioral task
behavioral1
Sample
8db0d28d4e9ea59a9e915080a41870d6_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
8db0d28d4e9ea59a9e915080a41870d6_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
8db0d28d4e9ea59a9e915080a41870d6_JaffaCakes118
-
Size
1.1MB
-
MD5
8db0d28d4e9ea59a9e915080a41870d6
-
SHA1
bfd8e4d34b38e82739507030ae2d203a1506e83c
-
SHA256
6cd20654fc250ac87991352b57036c4cd65845615d3e76ca708059036725ce84
-
SHA512
c23cbb86f5838e698bf8b2933eb664ee70c64ae30494f740548618e91da517640f4c3da4c6ae94b66d3bb1dd7ececb8dab9bb82c6dba4ce7f443a37cc9463760
-
SSDEEP
24576:ZFk0Ju5C+6zMLNXeWvknzIsrejCwJkWBth/H:ZFHJun6QKnEPjCwS2h
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8db0d28d4e9ea59a9e915080a41870d6_JaffaCakes118
Files
-
8db0d28d4e9ea59a9e915080a41870d6_JaffaCakes118.exe windows:6 windows x86 arch:x86
25c4fb4a248389347ae9cf0ce6995420
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
WriteFile
WriteConsoleW
WaitForMultipleObjects
WaitForSingleObject
VirtualQuery
VirtualFree
VirtualAlloc
SwitchToThread
SetWaitableTimer
SetUnhandledExceptionFilter
SetProcessPriorityBoost
SetEvent
SetErrorMode
SetConsoleCtrlHandler
LoadLibraryA
LoadLibraryW
GetSystemInfo
GetSystemDirectoryA
GetStdHandle
GetQueuedCompletionStatus
GetProcessAffinityMask
GetProcAddress
GetEnvironmentStringsW
GetConsoleMode
FreeEnvironmentStringsW
ExitProcess
DuplicateHandle
CreateThread
CreateEventA
CloseHandle
AddVectoredExceptionHandler
Sections
.text Size: 343KB - Virtual size: 342KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 433KB - Virtual size: 432KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 89KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
/4 Size: 512B - Virtual size: 281B
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/19 Size: 62KB - Virtual size: 62KB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/32 Size: 15KB - Virtual size: 15KB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/46 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/63 Size: 10KB - Virtual size: 9KB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/80 Size: 512B - Virtual size: 45B
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/99 Size: 125KB - Virtual size: 124KB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/112 Size: 59KB - Virtual size: 59KB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/124 Size: 19KB - Virtual size: 18KB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 786B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.symtab Size: 75KB - Virtual size: 75KB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ