Static task
static1
Behavioral task
behavioral1
Sample
07890f2e8cba3f4868aabf1bceec3702_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
07890f2e8cba3f4868aabf1bceec3702_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
07890f2e8cba3f4868aabf1bceec3702_JaffaCakes118
-
Size
61KB
-
MD5
07890f2e8cba3f4868aabf1bceec3702
-
SHA1
5fd61101baea454b55864f297e277cc0b3738c62
-
SHA256
dd285879f7f756cd9f2c24b4d8ed5eb0a7211a7786e345654a6b29f8185f9f5e
-
SHA512
5075df67bdd19a52531c9e097a3a1abab779bd1d879518135bf38646bdf8fc9addda5c7920cac5d7a85d7860615ff97b5a766782fb6ed9357b8875bdaf0da446
-
SSDEEP
1536:kmcwW6BcsDagZpVIm77yglR2VL3uZqnPJYn3mLLmQY2qJxxVH:qwhBhm2ImND26mBYn0mQY2G1H
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 07890f2e8cba3f4868aabf1bceec3702_JaffaCakes118
Files
-
07890f2e8cba3f4868aabf1bceec3702_JaffaCakes118.exe windows:4 windows x86 arch:x86
732d0599c437d4da10f0c14e4c3eec92
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WriteConsoleInputA
DeleteAtom
GetNumberOfConsoleFonts
WriteConsoleOutputCharacterW
OpenWaitableTimerW
QueryInformationJobObject
SetDefaultCommConfigA
Process32FirstW
GlobalUnfix
HeapSummary
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 66KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE