Static task
static1
Behavioral task
behavioral1
Sample
0347cd5bb21d22cd256d18ff9a04d569_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
0347cd5bb21d22cd256d18ff9a04d569_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0347cd5bb21d22cd256d18ff9a04d569_JaffaCakes118
-
Size
80KB
-
MD5
0347cd5bb21d22cd256d18ff9a04d569
-
SHA1
eb4e4520acb81a5493dc349518caeac3108a69d1
-
SHA256
137ba183968dd0ec295893bacd2ddf8312dc7004a59faf8b381ff2bb3e4a8587
-
SHA512
e262a796e14e809e98ccc67240a520931eea18c227c5d69ce776d0462d0cd45f4645d5847b441cd5fa2129b3395c824bac1e00a6d0c951b1b17b8d225d4bb0c7
-
SSDEEP
1536:VvAmEqdWEch3DmZmkVW5XX5zHfI2G82hW8fPL:ZlBdW73DmZhW5XX57vG8vYL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0347cd5bb21d22cd256d18ff9a04d569_JaffaCakes118
Files
-
0347cd5bb21d22cd256d18ff9a04d569_JaffaCakes118.exe windows:4 windows x86 arch:x86
af2804b32f93a6cd7287a34408a248ae
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Process32NextW
SetFileShortNameA
DeleteFileA
Module32First
SetTermsrvAppInstallMode
FindFirstFileExA
SetDefaultCommConfigA
ActivateActCtx
CommConfigDialogW
GlobalMemoryStatus
GetFirmwareEnvironmentVariableA
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rrdata Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE