Static task
static1
Behavioral task
behavioral1
Sample
465ee293014a4d5aeab38da7b96ca32a_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
465ee293014a4d5aeab38da7b96ca32a_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
465ee293014a4d5aeab38da7b96ca32a_JaffaCakes118
-
Size
69KB
-
MD5
465ee293014a4d5aeab38da7b96ca32a
-
SHA1
a3b21d7c92dacf0970f3c60400b7639bcc078b89
-
SHA256
d9446e035da826f188ad77835cbd1a9e4943a1c59b3344ce798a00f451dbebe0
-
SHA512
16e9a05a8579778b55b70f4699455cf2bd677ca550be8c654907768f0f5c7618be45debd42cb7e66fac62535f898b42a60b783d3e3cf253fcbb18681426788b0
-
SSDEEP
1536:XI6R+A25yXlzEMi2LZw/pAQjDNcj2elnNP7X8Sm/ZF8otV1B8C:XIkVloKZvQjBcj2ap7X8S8vx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 465ee293014a4d5aeab38da7b96ca32a_JaffaCakes118
Files
-
465ee293014a4d5aeab38da7b96ca32a_JaffaCakes118.exe windows:4 windows x86 arch:x86
e6616ad4a12b746bffb2272acaa37684
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
CloseHandle
BuildCommDCBA
SetConsoleWindowInfo
GetCommState
GetCommTimeouts
WriteFile
SetConsoleCursorMode
GlobalGetAtomNameA
LockFileEx
GetConsoleOutputCP
EnumSystemLanguageGroupsA
QueueUserWorkItem
CancelIo
FlushConsoleInputBuffer
BackupRead
SetConsoleCtrlHandler
GetConsoleInputWaitHandle
GetStringTypeExA
GetCommandLineA
GetStartupInfoA
ExitProcess
FoldStringA
GetCurrentProcess
SetInformationJobObject
IsDebuggerPresent
GetCommMask
WritePrivateProfileSectionA
CancelWaitableTimer
SetCurrentDirectoryA
Toolhelp32ReadProcessMemory
DosDateTimeToFileTime
GlobalAddAtomA
SetConsoleLocalEUDC
GetCommProperties
GetEnvironmentStringsA
GetPrivateProfileStructA
SetEvent
VerifyConsoleIoHandle
ReadProcessMemory
Sections
WEIJUNLI Size: 4KB - Virtual size: 96KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.date Size: 46KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ