Static task
static1
Behavioral task
behavioral1
Sample
490fd1b0efee6a08e470fc38b1f3747e_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
490fd1b0efee6a08e470fc38b1f3747e_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
490fd1b0efee6a08e470fc38b1f3747e_JaffaCakes118
-
Size
66KB
-
MD5
490fd1b0efee6a08e470fc38b1f3747e
-
SHA1
93ff5b80fffc7ab08816b446bbdd2c5196d533fd
-
SHA256
fbd5870538486be68e2ac362f3bd1d221e43d509e1ee7b8e5099b6e0ff962386
-
SHA512
d230c9edd33e428383e158211ff8dc043948d4d4e169414400f13eff34fa3472c5008b95101aad6b3fd4787b29ddc8031a5bed55d4344d482d0688473ef6fa21
-
SSDEEP
1536:4vv8JfEtB+pCiwL77ks9QseqsWKI/1DlaWaVzG1qJxxVfBd:fs/cCiwL3kWveqZz1G1fL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 490fd1b0efee6a08e470fc38b1f3747e_JaffaCakes118
Files
-
490fd1b0efee6a08e470fc38b1f3747e_JaffaCakes118.exe windows:4 windows x86 arch:x86
070a76fb57c3e9a7d937294c7cfe7d98
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetSystemTimeAdjustment
CallNamedPipeA
SetFileShortNameW
CreateJobObjectW
IsDebuggerPresent
DosPathToSessionPathA
GetProcessHeap
Module32NextW
IsSystemResumeAutomatic
AddAtomW
GetProcessWorkingSetSize
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 66KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE