Static task
static1
Behavioral task
behavioral1
Sample
066586572e370a25f672281974c0253b_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
066586572e370a25f672281974c0253b_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
066586572e370a25f672281974c0253b_JaffaCakes118
-
Size
80KB
-
MD5
066586572e370a25f672281974c0253b
-
SHA1
20e123db7a737e155b67d8578354c6aab8c57d6c
-
SHA256
4f2002ef9ba13693d0b846722103ec902371f8a3984c56f306211984f8323feb
-
SHA512
e1f06ad8cc401eb75e139b6e333dfae9849b19d0fe95218f5702c7ed86922a1fe7cbfb62b0e8773da493faaef05e14190f8249b01c2dc8c4a3dee30975d241be
-
SSDEEP
1536:+9bExA5dcOSGzvTHrFgt7tkQiztAx2gn8Ai4/rOVNgE/YnAee5C82hW8fPL:+9bExA5dJSGzvThMctAhi4/KvE8vYL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 066586572e370a25f672281974c0253b_JaffaCakes118
Files
-
066586572e370a25f672281974c0253b_JaffaCakes118.exe windows:4 windows x86 arch:x86
42d18d8b3d950330eccd4605329169d2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetLastConsoleEventActive
ConnectNamedPipe
GetModuleHandleExA
WaitForMultipleObjectsEx
GetConsoleCP
GetThreadPriority
TlsAlloc
GetDllDirectoryW
GetCurrencyFormatA
WriteConsoleOutputAttribute
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rrdata Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE