Static task
static1
Behavioral task
behavioral1
Sample
4e16cd8b7b2bab17e6fc690ed6c2659b_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
4e16cd8b7b2bab17e6fc690ed6c2659b_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4e16cd8b7b2bab17e6fc690ed6c2659b_JaffaCakes118
-
Size
16KB
-
MD5
4e16cd8b7b2bab17e6fc690ed6c2659b
-
SHA1
af3bc3b7b984e6dc65ac193204dc2994896d8052
-
SHA256
d58746f1542c61c6cdb03fa83911a5b1cc7d51a498dfa66c66f231ae45a34e1b
-
SHA512
812e9c3d96a5cc9f3b224a5540089e5bc2592f915563c5f939ebcb8a6a8d5d13a692aa63a6738520d691e252aca6018aea3a0b163f5290b26f43e1ef2da85f98
-
SSDEEP
384:UfijyhHPNErMtSMdH2wRKn3VyVAwm5Mb:UfBHP+otSG03Vnwm5Mb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4e16cd8b7b2bab17e6fc690ed6c2659b_JaffaCakes118
Files
-
4e16cd8b7b2bab17e6fc690ed6c2659b_JaffaCakes118.exe windows:4 windows x86 arch:x86
e132ac8c38f029ab24fea7376f789f6f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateNamedPipeA
GetProcAddress
PrepareTape
SetEnvironmentVariableA
CreateDirectoryW
LoadLibraryExA
GetConsoleInputExeNameW
GetLocalTime
CreateEventA
Sections
.text Size: 15KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 308B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE