Static task
static1
Behavioral task
behavioral1
Sample
1c359bd1c5d9aa12409ea9eebd5a9f57_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
1c359bd1c5d9aa12409ea9eebd5a9f57_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
1c359bd1c5d9aa12409ea9eebd5a9f57_JaffaCakes118
-
Size
132KB
-
MD5
1c359bd1c5d9aa12409ea9eebd5a9f57
-
SHA1
be801f94cea2bb31f1fc629c6c37bd8a013a9204
-
SHA256
f81e730f3cb53f57b4024369758910c9f2226b49a53270754825ccacbf2abaa5
-
SHA512
05d73f7baf5add25c3c2f2ec0bafa2ec35a07a88186f6d6fb027a2f2ce9d2e6fd66bfee7905a3fefecd34fc9fed2ee5c1410df46471f7e96d24c1f62c8ce1482
-
SSDEEP
3072:k0LzHewPv+HxLk1lY7HLBSXT7dXybtXZXqMafeKQj6fz8/s:kw+Y+RKY7HN2BXozXcfeKQjg8/s
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1c359bd1c5d9aa12409ea9eebd5a9f57_JaffaCakes118
Files
-
1c359bd1c5d9aa12409ea9eebd5a9f57_JaffaCakes118.exe windows:4 windows x86 arch:x86
7583703d15b24ada99713cd067c07c44
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetComputerNameExA
GetFileSize
GetTapeParameters
SetVolumeMountPointA
CommConfigDialogA
WaitCommEvent
SetThreadContext
InvalidateConsoleDIBits
FreeEnvironmentStringsA
LocalFree
FileTimeToDosDateTime
CreateJobObjectA
GetNumberOfConsoleMouseButtons
VirtualFree
CancelIo
DeleteTimerQueue
GetCommandLineA
ExitProcess
GetStartupInfoA
Sections
PESEC0 Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
PESEC1 Size: - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
idata Size: 112KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
idata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ