Static task
static1
Behavioral task
behavioral1
Sample
0860d1deafc16b9bd503e7d0ac8f599e_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
0860d1deafc16b9bd503e7d0ac8f599e_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0860d1deafc16b9bd503e7d0ac8f599e_JaffaCakes118
-
Size
52KB
-
MD5
0860d1deafc16b9bd503e7d0ac8f599e
-
SHA1
b03d42939431140865b30c0f3985bb902752e790
-
SHA256
8540c3a962919131b3562a101b0d5d741016c177fdc8f8181574f0a95f5eaf19
-
SHA512
eca8cb9337745f238556a7cd3844a0924011c42c91a7bb089232e021890bb091f99c7f8ac2639ebbe568d3d12cf88a3a6e09c9653da8eb1032c82382891cab35
-
SSDEEP
768:Vo5YY/e9b0vObfUlcVTR32jKtKsrz2EDJClgMj4j1:0vufUlcVTQ+vrVdC224x
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0860d1deafc16b9bd503e7d0ac8f599e_JaffaCakes118
Files
-
0860d1deafc16b9bd503e7d0ac8f599e_JaffaCakes118.exe windows:4 windows x86 arch:x86
65bff1578df5a6ee7187d692930bf1e4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCommandLineA
GetStartupInfoA
HeapAlloc
TlsGetValue
GetModuleHandleA
SetEnvironmentVariableA
user32
CreateAcceleratorTableW
gdi32
CombineTransform
GetMapMode
DeleteObject
msvcrt
_exit
_XcptFilter
exit
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_acmdln
Sections
.text Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE