Static task
static1
Behavioral task
behavioral1
Sample
346f995fb74e4f1878f0bbd92996d183_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
346f995fb74e4f1878f0bbd92996d183_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
346f995fb74e4f1878f0bbd92996d183_JaffaCakes118
-
Size
16KB
-
MD5
346f995fb74e4f1878f0bbd92996d183
-
SHA1
84c137f7e01504ecd2f896bfb6dd1049e129a12a
-
SHA256
1dca729fd9396bd11749ed269af28d6ef66ac9a24865a90a73442a2a647606a9
-
SHA512
93e17ff6eb7574e8a10b30b936d87df65cbabaf22f03888de6cd6b73233f1ee700cdda4e44645aca27a6510b6d3aaf9e599525574b751b2ecafc21b17c9f21c8
-
SSDEEP
384:jrrJJrRhh0ZIeL8AEh0yMmMnEbCv/CLzWxsjf7Fhxyt1o8v6frnOFnCW:zJHhh0ZIsEhJMnEbACLzWxsjxhxyDo87
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 346f995fb74e4f1878f0bbd92996d183_JaffaCakes118
Files
-
346f995fb74e4f1878f0bbd92996d183_JaffaCakes118.exe windows:4 windows x86 arch:x86
da7a96c3da01c2bc67b027d8239c50b3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetConsoleScreenBufferInfo
GetPrivateProfileStructA
WideCharToMultiByte
SleepEx
EnumResourceLanguagesA
GetUserDefaultLangID
OpenConsoleW
GetNamedPipeInfo
BeginUpdateResourceA
HeapUnlock
SetConsoleKeyShortcuts
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.brdata Size: 27KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE