Static task
static1
Behavioral task
behavioral1
Sample
5fa0603cb77ace9495088a123f30eba8_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5fa0603cb77ace9495088a123f30eba8_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5fa0603cb77ace9495088a123f30eba8_JaffaCakes118
-
Size
66KB
-
MD5
5fa0603cb77ace9495088a123f30eba8
-
SHA1
b9bd74cb84e10d852351ede1a676aa4edf1b1d23
-
SHA256
05752dde412077b846002679c8a8ea62ad0953cb5dab19e267e7020a21cfd19b
-
SHA512
02feb7188ba21cc23f8a4e70096760bdc295ce0dea0daa6209c83cbcdcb56fbc8bfbf3b33a4f8566739ac88608a123ac7d8b903d4ed25c249570c88381ea4044
-
SSDEEP
1536:iEvsW8L/gantp3XfDuXvi0mEXLoz4B4jaR/5hiF2:iDW8LTbbufi0mE7oUB4j85hI2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5fa0603cb77ace9495088a123f30eba8_JaffaCakes118
Files
-
5fa0603cb77ace9495088a123f30eba8_JaffaCakes118.exe windows:4 windows x86 arch:x86
b487496fe6701e4c4a24b449a8e6f65e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ReadConsoleOutputA
GetWindowsDirectoryW
CreateFileA
GetConsoleInputExeNameA
EnumResourceLanguagesW
ReplaceFile
AddAtomW
DeactivateActCtx
FlushInstructionCache
CreateMutexA
GetVersion
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE