Static task
static1
Behavioral task
behavioral1
Sample
1b0b9a9b273d8f717dc1d609dd1f37b5_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
1b0b9a9b273d8f717dc1d609dd1f37b5_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
1b0b9a9b273d8f717dc1d609dd1f37b5_JaffaCakes118
-
Size
76KB
-
MD5
1b0b9a9b273d8f717dc1d609dd1f37b5
-
SHA1
0d5bc6860f52e4ddc9fad5590cd062698c7aa0f7
-
SHA256
8545acbdc889d225c1328ecb4c6198be3900891801e73b5df7663a0f52a46768
-
SHA512
33ef25c8277ad846fa50da95734cea0b7a6fb718cb35fbfff523b5e0ece486055f66532114312df78f6ae2be2a25b220600d2c5dd5e27b5d87b1a8bf612dbe41
-
SSDEEP
1536:PnO49obDxlakH8iti1iPO4q+kWiwgMpjVrs2ryrd1vUQuq6:PO49gDqXit+T4q+LfgMHs2qo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1b0b9a9b273d8f717dc1d609dd1f37b5_JaffaCakes118
Files
-
1b0b9a9b273d8f717dc1d609dd1f37b5_JaffaCakes118.exe windows:4 windows x86 arch:x86
18eaa65e902bf471362f93e700fd47cb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetNumaProcessorMap
TerminateProcess
GetConsoleAliasA
GlobalAlloc
GetShortPathNameA
ClearCommBreak
MoveFileWithProgressA
PrivMoveFileIdentityW
CreateTapePartition
HeapSummary
ReadFile
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.brdata Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE