Static task
static1
Behavioral task
behavioral1
Sample
4d542d5d1c455a90eb6f16f8871ee3e5_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
4d542d5d1c455a90eb6f16f8871ee3e5_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4d542d5d1c455a90eb6f16f8871ee3e5_JaffaCakes118
-
Size
324KB
-
MD5
4d542d5d1c455a90eb6f16f8871ee3e5
-
SHA1
adfd0d5466f9d7ee92421a6f43304b4232ef593e
-
SHA256
8999d533df802527a3d9b611272291cd2baf4a374085b3f3e6ebb55f5b033605
-
SHA512
a280db1915ee4fe92c65480bf881af0431f3e29882ef8126562a462cfc0a4e0211ebc4618b1b161773d3fac8a0fee8ffbb04e88aecd8247744dbdc798e5f736e
-
SSDEEP
6144:2EA4hGPlYOairjF8yCk+I6qLK5+7pzBvUV7rhRpGmH8NBrehX:27Pht8Pa6qLK5+7QPT9cbehX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4d542d5d1c455a90eb6f16f8871ee3e5_JaffaCakes118
Files
-
4d542d5d1c455a90eb6f16f8871ee3e5_JaffaCakes118.exe windows:4 windows x86 arch:x86
6f98b2bd42a0a36fd6d22a904c06322a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
VirtualAlloc
VirtualFree
VirtualProtect
LoadLibraryA
GetProcAddress
GetMailslotInfo
DuplicateHandle
GetEnvironmentVariableA
GetConsoleCP
user32
SendMessageA
Sections
UFybccTu Size: 44KB - Virtual size: 42KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
OnSzainV Size: 4KB - Virtual size: 558B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
LnbyXhDH Size: 272KB - Virtual size: 292KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE