Static task
static1
Behavioral task
behavioral1
Sample
0dfb3a1c860ac4899bd41100de61aec3_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
0dfb3a1c860ac4899bd41100de61aec3_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
0dfb3a1c860ac4899bd41100de61aec3_JaffaCakes118
-
Size
76KB
-
MD5
0dfb3a1c860ac4899bd41100de61aec3
-
SHA1
a0875b8a165472fe7abdc58899a69fefec8fede8
-
SHA256
0bd7189c4bb8aaaf3572504bd81c9a33571b4f7b7dbdc6ad3c41efeb8e9a9239
-
SHA512
05b96026ca01f569a468fd3487a205da94411d29567820ffb905ef4b402835a1d3712fadc407bf7ab9f44d533b62f46e253796ff4e7e9e581f068389cdf695aa
-
SSDEEP
1536:wCLR0eS2yvmGeXhsLq3KxBJXKdF3aPJgtsv4Pjd1cAnjEErxTWDTMqhGKYIZTETw:wj2iuh6q3M0Fq4s0TnjBkMqhGKZTbx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0dfb3a1c860ac4899bd41100de61aec3_JaffaCakes118
Files
-
0dfb3a1c860ac4899bd41100de61aec3_JaffaCakes118.exe windows:4 windows x86 arch:x86
8a11ea559e5389f73d1080b8c7aee192
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
QueryActCtxW
SetUnhandledExceptionFilter
LocalFree
GetCurrentDirectoryW
WriteFile
CreateSocketHandle
EnumCalendarInfoA
GetCompressedFileSizeW
WriteConsoleA
GetConsoleScreenBufferInfo
PrivCopyFileExW
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.zrdata Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE