Static task
static1
Behavioral task
behavioral1
Sample
0264394be005060b4d8c8316329b3c15_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
0264394be005060b4d8c8316329b3c15_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
0264394be005060b4d8c8316329b3c15_JaffaCakes118
-
Size
56KB
-
MD5
0264394be005060b4d8c8316329b3c15
-
SHA1
a98b4f48933522f773d3a9d176ca522b7ecd2913
-
SHA256
670dde445415d1b12a8960a88c5557a3463388a425f3eb8769c8587e966070fe
-
SHA512
c8f93373468736c26737561d90636483ab158dc1658b8d693800f0733b5851765c1d55aaa1cce500f6d748d84fd3316db6c8657e5325b6ff953f6dd2ec737154
-
SSDEEP
1536:wtofv7c41fg+hxeonsKs/vKM8QvLyUvh5JHOJWkuj+DHm/0Ju3s:t37cQfges/vn8xUvDJuJWjP8JGs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0264394be005060b4d8c8316329b3c15_JaffaCakes118
Files
-
0264394be005060b4d8c8316329b3c15_JaffaCakes118.exe windows:4 windows x86 arch:x86
d98f8fd282b78e978c47b4a7730ba6b1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetComputerNameExA
GetConsoleCP
BaseDumpAppcompatCache
LCMapStringW
SetThreadUILanguage
GetConsoleDisplayMode
SetHandleCount
GetFileSizeEx
WriteConsoleInputVDMA
HeapSize
CommConfigDialogA
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE