Static task
static1
Behavioral task
behavioral1
Sample
62c117dfa6925c53b1d650985bca3e1b_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
62c117dfa6925c53b1d650985bca3e1b_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
62c117dfa6925c53b1d650985bca3e1b_JaffaCakes118
-
Size
20KB
-
MD5
62c117dfa6925c53b1d650985bca3e1b
-
SHA1
f959961aecd1bd06f69bb3e2638ad97ddde9e134
-
SHA256
71b850845cf9233dc13aff518f80429fb62586b66ed0806a167cbbe1241d8968
-
SHA512
4ee9edb03ed3004de3ba8ee5537ab03dfd15f2336f95e8bf1e93cb253e660c5aa543ef9a90836648de25c4250279c19f057a50cbeefe4c50db1b691a14e3c2aa
-
SSDEEP
384:X0oicoTc7qO2iB/840I9FPrIvmQea0EgJrr0zN4VMRljexGTkq7pU3YoDUP:nfBTXPceQNm2JWMjZt7GXD2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 62c117dfa6925c53b1d650985bca3e1b_JaffaCakes118
Files
-
62c117dfa6925c53b1d650985bca3e1b_JaffaCakes118.exe windows:4 windows x86 arch:x86
b6479974ed142f350ce4a3dfada7d50b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalUnWire
ReadConsoleOutputCharacterA
RegisterWaitForSingleObject
FindAtomA
RemoveDirectoryA
ChangeTimerQueueTimer
WriteFileGather
PeekNamedPipe
BackupRead
GetTickCount
GetFileInformationByHandle
GlobalHandle
GetStringTypeA
SetFileAttributesA
DeleteAtom
GetCommandLineA
ExitProcess
GetStartupInfoA
Sections
itext Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
text Size: 12KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 448B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ