Static task
static1
Behavioral task
behavioral1
Sample
68e264949d6016a477a5784e08948cfb_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
68e264949d6016a477a5784e08948cfb_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
68e264949d6016a477a5784e08948cfb_JaffaCakes118
-
Size
83KB
-
MD5
68e264949d6016a477a5784e08948cfb
-
SHA1
65a5500c0d23ca80731f12b356e759ccbb175a10
-
SHA256
e48271fc9f40e16254847120a85e154d3e2ecccd3718391b8ded20d57018aacf
-
SHA512
639c21a1ff0ae44ed448fe29ab82c7447e2b3ebe75aed7def5efcdbd2a21cc2f2a3bbb8adcb416428383fb0f9125cbd34c019df3989bc2bd7955a8f348631c13
-
SSDEEP
1536:nqxxwm48S4ZBx//x5pKgrDbz1Jj2dpTjfPjEErxTWDTMqhGKYIZTET8bDQ:qW8SoBZJK2zTj4pPPjBkMqhGKZTbbc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 68e264949d6016a477a5784e08948cfb_JaffaCakes118
Files
-
68e264949d6016a477a5784e08948cfb_JaffaCakes118.exe windows:4 windows x86 arch:x86
6327a3567f62a818782b77fdc3a0402c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
TermsrvAppInstallMode
WriteConsoleInputW
GetStartupInfoA
VerifyConsoleIoHandle
LocalReAlloc
CheckNameLegalDOS8Dot3A
WriteConsoleOutputCharacterA
SetDefaultCommConfigA
ExpandEnvironmentStringsA
ShowConsoleCursor
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.zrdata Size: 27KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE