Static task
static1
Behavioral task
behavioral1
Sample
4acb61a2c5daab6c4cb97fc9030fc6ba_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4acb61a2c5daab6c4cb97fc9030fc6ba_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4acb61a2c5daab6c4cb97fc9030fc6ba_JaffaCakes118
-
Size
94KB
-
MD5
4acb61a2c5daab6c4cb97fc9030fc6ba
-
SHA1
bb6c13cfdd04fcec877568408d5cc541ade943ce
-
SHA256
376cbb049d22c84ccffdaca801531af9d57d0ccdc69cfd17efd42060d4615e1e
-
SHA512
d6cf6211d672c26c38f5bf07ebf14bac1e163f25c038ce39e7992500373f7bb304724979996ef094b06d18f75f0d4f27dabe5db00e771db3ae3f94ecda40ba91
-
SSDEEP
1536:oLxPajZ3NoM32mlyWM6kScQKSyJf3N11V6/9F172GjFc8YaEJwZK4/83ZoMOALFC:E6NP2mgtacQKSQf3X149v7ZhZEXtpxLa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4acb61a2c5daab6c4cb97fc9030fc6ba_JaffaCakes118
Files
-
4acb61a2c5daab6c4cb97fc9030fc6ba_JaffaCakes118.exe windows:4 windows x86 arch:x86
6ce8020dcc3b3e73ab098463fc6dbd40
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateToolhelp32Snapshot
lstrcpyn
VDMConsoleOperation
GetEnvironmentStrings
DuplicateHandle
GetConsoleKeyboardLayoutNameA
SetMailslotInfo
GetFileSizeEx
Module32FirstW
CopyFileA
GetComputerNameA
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.krdata Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE