Static task
static1
Behavioral task
behavioral1
Sample
5d69417b1172a1aff23da4ac74fb5222_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
5d69417b1172a1aff23da4ac74fb5222_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5d69417b1172a1aff23da4ac74fb5222_JaffaCakes118
-
Size
76KB
-
MD5
5d69417b1172a1aff23da4ac74fb5222
-
SHA1
266d76279908e669509263bdbec17d45c5b99a97
-
SHA256
784e8f696985441878468fbb10f1a2fed9cd47c1b71bda39eac9bc951f5b2afb
-
SHA512
f2cb2d1c58011ebd73dfcce288340ee975987d63a2de33daeeffdc41adf1a190e865175aa2aa082ae5d8079468436c04c195ff9779521805c820e1bb61b75161
-
SSDEEP
1536:93KDyzw7XWOfmzYNWzAxQYhFgWg0TvqFM1F7cgsS+pjVrs2ryrd1vUQuq6:93ROf1be8Tvqi7OzHs2qo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5d69417b1172a1aff23da4ac74fb5222_JaffaCakes118
Files
-
5d69417b1172a1aff23da4ac74fb5222_JaffaCakes118.exe windows:4 windows x86 arch:x86
85d7a65df1e2cc76e5c7ead423a038a1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetConsoleLocalEUDC
GetPrivateProfileIntA
HeapSetInformation
Heap32ListNext
GetProcessTimes
AddLocalAlternateComputerNameW
FreeEnvironmentStringsA
GetThreadPriorityBoost
SetProcessAffinityMask
GetFileAttributesExW
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.brdata Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE