Static task
static1
Behavioral task
behavioral1
Sample
035a9ff0d04c9bc2e80bb3495c1d6c6c_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
035a9ff0d04c9bc2e80bb3495c1d6c6c_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
035a9ff0d04c9bc2e80bb3495c1d6c6c_JaffaCakes118
-
Size
3KB
-
MD5
035a9ff0d04c9bc2e80bb3495c1d6c6c
-
SHA1
21dc609a054606e2f71632d1b14a1956f9f91f54
-
SHA256
043e68cfdc1017f9d1675a208fa95c50911df387d5f92311ed184f8a36116314
-
SHA512
7e995f071427c69e0e3e125970e5cf123eeacfc78bf6df80e1362d42e9cce829720fbd903afc8793f80bca6dd1dbf8adcc86b944de268516a8f36a5dedb0836f
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 035a9ff0d04c9bc2e80bb3495c1d6c6c_JaffaCakes118
Files
-
035a9ff0d04c9bc2e80bb3495c1d6c6c_JaffaCakes118.exe windows:4 windows x86 arch:x86
76054051be54cd3b471caaf230e466f3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetStdHandle
SetConsoleCursorPosition
Sleep
SetConsoleFont
GetConsoleScreenBufferInfo
SetConsoleTextAttribute
GetConsoleMode
SetConsoleMode
ReadConsoleInputA
GetConsoleCursorInfo
SetConsoleCursorInfo
msvcrt
_stricmp
strtoul
memcpy
_kbhit
_getch
putchar
printf
__getmainargs
Sections
.text Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 656B - Virtual size: 724B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE