Static task
static1
Behavioral task
behavioral1
Sample
5b7e49eeabe4d7b6d114ffd39d9df136_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
5b7e49eeabe4d7b6d114ffd39d9df136_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5b7e49eeabe4d7b6d114ffd39d9df136_JaffaCakes118
-
Size
91KB
-
MD5
5b7e49eeabe4d7b6d114ffd39d9df136
-
SHA1
7dbe2c6b4e8061c16b426cde75175055d1ab5e68
-
SHA256
8d957cd9ec0634d19024fe5c6868de72cd11b64e88d33cb1c20d7c9794b89405
-
SHA512
6c2112e9f13c6d2bb7c9fbc3e4a154c773b8b60a58e6193cd74038e4f9bcd84680c7b553f8e5f3f6754870edff79894027c831bbec6bb53c80d7b9cd4064402f
-
SSDEEP
1536:+nb4izU+tJNbUckHvRN/mLJ5dOZ1aLxCuMtjXc8YaEJwZK4/83ZoMOArc:+nb4izvb1UckPn/o5oZ1axQt7hZEXtpG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5b7e49eeabe4d7b6d114ffd39d9df136_JaffaCakes118
Files
-
5b7e49eeabe4d7b6d114ffd39d9df136_JaffaCakes118.exe windows:4 windows x86 arch:x86
0a0fbe9b6a14527433e9dbc0e117e1ee
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
AddLocalAlternateComputerNameW
WriteConsoleW
DeleteVolumeMountPointA
CreateMutexA
SetConsoleTitleA
CreateProcessInternalA
ProcessIdToSessionId
FreeEnvironmentStringsW
HeapCreateTagsW
GetStringTypeExW
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.krdata Size: 35KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE