Static task
static1
Behavioral task
behavioral1
Sample
67775190a5f3535fd3afe37e912e1848_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
67775190a5f3535fd3afe37e912e1848_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
67775190a5f3535fd3afe37e912e1848_JaffaCakes118
-
Size
207KB
-
MD5
67775190a5f3535fd3afe37e912e1848
-
SHA1
5bdcd998b622f4d4fbac80181457eeea26261506
-
SHA256
9a22e575c5227ce2f744d0cd28e45707182e1b95d7b60b9c34bc93cd72c6bc97
-
SHA512
5a79f5349d20646eb67e06b6e889cfecce9505608a419bf59c79dce346bac05fb31c1033f8c23741701efadcfdfd2abda90cb66f338adbed5914d3e2ede0a7cd
-
SSDEEP
3072:G4S7zKarm5upBWhspqegULcCcDRLgnHouMarlLimu0wXh0e5ptMogEACDpxl:EAEv0eTLVnIuhl2muzh15ptMopPDr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 67775190a5f3535fd3afe37e912e1848_JaffaCakes118
Files
-
67775190a5f3535fd3afe37e912e1848_JaffaCakes118.exe windows:4 windows x86 arch:x86
f13def1e35d2e098385da121b42ba1d8
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetCommandLineA
ExitProcess
GetStartupInfoA
GetComputerNameA
GetConsoleInputExeNameA
GetConsoleAliasesA
Thread32First
FatalAppExitW
GetThreadPriority
DnsHostnameToComputerNameW
GetConsoleCursorInfo
SetThreadPriority
IsBadWritePtr
GetUserDefaultUILanguage
GetConsoleWindow
ReadConsoleOutputAttribute
WaitForMultipleObjects
EnumDateFormatsExA
SetEvent
GetTimeFormatA
SetEvent
SetVolumeLabelW
EnumDateFormatsExW
RegisterWowExec
ReadConsoleOutputW
lstrcpyA
LocalLock
LocalFree
FindResourceExA
SetEndOfFile
DnsHostnameToComputerNameA
GetCommMask
WritePrivateProfileStructW
SetConsoleWindowInfo
FindNextFileW
DebugBreak
GetSystemTimeAdjustment
GetConsoleKeyboardLayoutNameA
Sections
text Size: 4KB - Virtual size: 392KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
rdata Size: 197KB - Virtual size: 204KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
idata Size: 2KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ