Static task
static1
Behavioral task
behavioral1
Sample
741989be22672981091e5d33c8809b34_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
741989be22672981091e5d33c8809b34_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
741989be22672981091e5d33c8809b34_JaffaCakes118
-
Size
220KB
-
MD5
741989be22672981091e5d33c8809b34
-
SHA1
b0a672baf2f2c6feed482c3cdbb6553a38d92503
-
SHA256
964c35efe01f8499a8ddad21425ee067716ca1c969406f5bbedbc0b316779bc3
-
SHA512
9bdb1ecfce3355b264de69f42aa23482afd67aafc146735ad644d3162491b40c47db0aff1c38f5282b089da49bdcc200439cb11aae838b4e8e8822eee14ab014
-
SSDEEP
3072:JHAb0+hnob0xYQagOtQsV8duCdBHfwW6eVl6w9eq4MI:qAm5OtXmukI3qeq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 741989be22672981091e5d33c8809b34_JaffaCakes118
Files
-
741989be22672981091e5d33c8809b34_JaffaCakes118.exe windows:4 windows x86 arch:x86
605dbbaaa67efc1107589d20df2e4272
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetFileSizeEx
GetCalendarInfoA
GetStringTypeExW
GetDefaultCommConfigA
VirtualAlloc
SetInformationJobObject
SetVolumeLabelA
EnumResourceTypesA
ExitProcess
IsBadCodePtr
SetProcessPriorityBoost
ChangeTimerQueueTimer
WriteConsoleOutputAttribute
GetThreadPriority
SetUnhandledExceptionFilter
GetModuleFileNameA
GetDevicePowerState
GetConsoleTitleA
RaiseException
GetSystemInfo
CreatePipe
GetCurrentConsoleFont
SetProcessWorkingSetSize
GetCurrentProcess
gdi32
SetViewportOrgEx
shell32
SHGetSpecialFolderPathA
winmm
timeGetTime
timeEndPeriod
Sections
.itext Size: - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 208KB - Virtual size: 490KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 860B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ