Static task
static1
Behavioral task
behavioral1
Sample
23ef643b57baeb2db0aa816097f0c4ee_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
23ef643b57baeb2db0aa816097f0c4ee_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
23ef643b57baeb2db0aa816097f0c4ee_JaffaCakes118
-
Size
92KB
-
MD5
23ef643b57baeb2db0aa816097f0c4ee
-
SHA1
bffca3865848c9286b828a1489fc51bf394bc410
-
SHA256
22473b260e666ed64ddc0086d58f9a08b98395ee370600e80cafc50f92829b5d
-
SHA512
c201020b2bc180be456737cdd87311950c5a3ba22640a76f8913c5497892a250f0940153c16555e09137c8e55925f11d7bb3541d51164416f20039fe0d5f4fbc
-
SSDEEP
1536:BrVk5gvGpB1tbLYYW97aA1NmO57DsSU7poi/gejLz:BJGqIbkfLmO1DsSW3Ye/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 23ef643b57baeb2db0aa816097f0c4ee_JaffaCakes118
Files
-
23ef643b57baeb2db0aa816097f0c4ee_JaffaCakes118.exe windows:4 windows x86 arch:x86
357c8451ea2febcb71eb844e1cf43f0a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
CloseHandle
BuildCommDCBAndTimeoutsA
GetCommModemStatus
GetWriteWatch
WriteConsoleInputVDMA
WritePrivateProfileSectionA
RegisterConsoleVDM
CreateFileA
SetTermsrvAppInstallMode
GetConsoleCommandHistoryLengthA
GetCommandLineA
GetStartupInfoA
ExitProcess
InterlockedExchangeAdd
DeleteTimerQueueEx
GlobalCompact
SetConsoleMenuClose
SystemTimeToFileTime
SetCurrentDirectoryA
FindNextVolumeA
QueryInformationJobObject
TransactNamedPipe
BuildCommDCBA
EnumLanguageGroupLocalesA
ReadConsoleInputA
Sections
WEIJUNLI Size: 4KB - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.adata Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 4KB - Virtual size: 120B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ