Static task
static1
Behavioral task
behavioral1
Sample
0988c3f0e752a83bf32df316cfd30f49_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
0988c3f0e752a83bf32df316cfd30f49_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
0988c3f0e752a83bf32df316cfd30f49_JaffaCakes118
-
Size
69KB
-
MD5
0988c3f0e752a83bf32df316cfd30f49
-
SHA1
5ab6914c885165e0a5d4600b7837e558582e29f7
-
SHA256
6aced12bdecc7cd868ad0f9c9faa544ec8c07c9fc1a8820ec3723d753994255b
-
SHA512
933c2652a9090b32ca849b021fedc1e3e97680e2739d4b1b80ab9e344e31ed7725305ae490388aa60947d3a950f0e47c59cd5c94e9c4f7f645e4539260acca0b
-
SSDEEP
1536:arbsicxbJ4nzJjW1xu6hJu6DVDOfLZV5oGReqTId2beDL8:+si+GtuFlGZV5rDTId21
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0988c3f0e752a83bf32df316cfd30f49_JaffaCakes118
Files
-
0988c3f0e752a83bf32df316cfd30f49_JaffaCakes118.exe windows:1 windows x86 arch:x86
e631cf950ea3121dae9ec65c382b7f0c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FillConsoleOutputAttribute
FillConsoleOutputCharacterA
FlushConsoleInputBuffer
GetConsoleMode
GetConsoleScreenBufferInfo
CloseHandle
ReadConsoleA
ReadConsoleOutputA
ReadConsoleOutputW
ReadConsoleW
RtlUnwind
ScrollConsoleScreenBufferA
SetConsoleCursorInfo
SetConsoleCursorPosition
SetConsoleMode
SetConsoleTextAttribute
CreateFileA
WriteConsoleA
WriteConsoleOutputA
WriteConsoleOutputW
WriteConsoleW
lstrlenA
lstrlenW
user32
MessageBoxA
crtdll
_iob
_itoa
__GetMainArgs
_stricmp
_strnicmp
toupper
abort
exit
fclose
ferror
fgetc
fopen
fputc
free
fwrite
getchar
localeconv
malloc
memcpy
memmove
memset
pow
raise
signal
strcat
strchr
strcmp
strncmp
strtol
ungetc
wcslen
wctomb
Sections
.text Size: 34KB - Virtual size: 34KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 692B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 88B - Virtual size: 88B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE