Static task
static1
Behavioral task
behavioral1
Sample
225c7a4b1d2d8b7256a62b5d45cef1eb_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
225c7a4b1d2d8b7256a62b5d45cef1eb_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
225c7a4b1d2d8b7256a62b5d45cef1eb_JaffaCakes118
-
Size
63KB
-
MD5
225c7a4b1d2d8b7256a62b5d45cef1eb
-
SHA1
8cee62893baba24b0e9795e253048380d2c8e64a
-
SHA256
c54b1df2d855908f7e582262a87a03172caf0060f60a051b3c7559c07c1416fd
-
SHA512
2d033acfa5a10060f32d8d53d572f2fe0fb62c60a438d4cb3f07d9b578f2a6ab9e5f7b88cc0e23c1079073c1ff9395fc5f69a042ed1d9bce1a4d4ce87f8cc8a9
-
SSDEEP
1536:kSi1DGYz2yR0Y/5rqeeIm+JTlFaVOtlOntZCe/2xGf4QPXK:kSiBh/5rqeeFaZF7tEntUe6GpPXK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 225c7a4b1d2d8b7256a62b5d45cef1eb_JaffaCakes118
Files
-
225c7a4b1d2d8b7256a62b5d45cef1eb_JaffaCakes118.exe windows:4 windows x86 arch:x86
81c00cc5d7d879e40e9afd9eaae5d4d0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
InitializeCriticalSectionAndSpinCount
SetConsoleNlsMode
GetCPInfo
_hread
SetConsoleHardwareState
CreateProcessInternalA
UnhandledExceptionFilter
GetSystemDirectoryW
OpenFile
BeginUpdateResourceW
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 49KB - Virtual size: 70KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE