Static task
static1
Behavioral task
behavioral1
Sample
449194f3b57be32ae1380d5dcb0c8415_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
449194f3b57be32ae1380d5dcb0c8415_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
449194f3b57be32ae1380d5dcb0c8415_JaffaCakes118
-
Size
87KB
-
MD5
449194f3b57be32ae1380d5dcb0c8415
-
SHA1
c377432e88c12a4b4130e242e846665509228ac0
-
SHA256
6d2427a94e9df5c20e3d62f7ee0435aa8fab867bec2ce58118d00e8250b12a75
-
SHA512
676ed391112a8a696830b48ace5bc3df5483f79373276a6f851b4c8a1ffae66e398b5a1c902e400e7edeae1e02da107d61ed64710113f899109641750c138469
-
SSDEEP
1536:IqRS/CqmKOgptPcBvegZlUz+iGaKgL/GN825jTLhAZjEpqkxUXmMgIr9b7Dn0tsW:IiS/jttP77z+iGwL/GNxRTLS2pqkyXmB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 449194f3b57be32ae1380d5dcb0c8415_JaffaCakes118
Files
-
449194f3b57be32ae1380d5dcb0c8415_JaffaCakes118.exe windows:4 windows x86 arch:x86
fdecfe8c45258c49a61f27b494813e70
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CallNamedPipeA
GetProcAddress
GetCommandLineA
GetConsoleMode
GetModuleHandleA
InvalidateConsoleDIBits
VirtualProtect
VirtualQuery
VirtualAlloc
WriteProcessMemory
VirtualFree
ws2_32
send
Sections
.code Size: - Virtual size: 440KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.code Size: 86KB - Virtual size: 88KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE