Static task
static1
Behavioral task
behavioral1
Sample
66b6fbe339df55260726b864c11830f6_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
66b6fbe339df55260726b864c11830f6_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
66b6fbe339df55260726b864c11830f6_JaffaCakes118
-
Size
176KB
-
MD5
66b6fbe339df55260726b864c11830f6
-
SHA1
4548743dd8dc8568bb29a6c314d29cabbf96b395
-
SHA256
79e83a55bd78a772c5678d4b160301f575de1017ec1b9266e6a369d6f2b1d603
-
SHA512
96d58e695ca829add46dfd7f5da4361c6e6ec1330effc74fdd4c3e3319761e3361f7e40a5f1f748a25a867135442dd2de4848d442f074aaa09e10355a636a08a
-
SSDEEP
3072:7TJbs8FyjelJ9+BPk9Peb3bzE6SwrZMSadZgzLIzYTas8bTEAUYZSnbb:Jbs5GJ9++lMbzxSwtV4ZgzL/adbTE3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 66b6fbe339df55260726b864c11830f6_JaffaCakes118
Files
-
66b6fbe339df55260726b864c11830f6_JaffaCakes118.exe windows:1 windows x86 arch:x86
14c9d75a495fd34071c4863bd42a4e0e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetSystemDirectoryA
OpenMutexA
VirtualAlloc
GetVolumePathNamesForVolumeNameA
GetConsoleScreenBufferInfo
EnumSystemLocalesA
SetErrorMode
GetStringTypeExA
ReplaceFileA
ReadConsoleOutputAttribute
FreeResource
ntdll
RtlGetLastWin32Error
advapi32
RegQueryInfoKeyW
AddAce
comctl32
InitCommonControlsEx
Sections
.text Size: 51KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 86KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 38KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ