Static task
static1
Behavioral task
behavioral1
Sample
75a32bd943ccd3789824017ad1ea18c3_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
75a32bd943ccd3789824017ad1ea18c3_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
75a32bd943ccd3789824017ad1ea18c3_JaffaCakes118
-
Size
308KB
-
MD5
75a32bd943ccd3789824017ad1ea18c3
-
SHA1
95fb197f1174c22f9f4ba76461f049f0a6fe3a03
-
SHA256
d992840ce0ca0dd233af91ab40fa8c17616cf9520636ba5456051352a9de7cec
-
SHA512
9ef6cef1f34e3ef33ccc962ee97ad1fc6f597196f388704ee072ff06dff86591d7ab7e424858fcfe24ba6e3ae79e91c4c9563a554355d814b2a0ccd48d900536
-
SSDEEP
6144:iOmWZ03JutnJunbzRkwd2Yq4VVq+0ofWtToeXSjDoe9e:iOd0+nUn6u9qY+BoeIo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 75a32bd943ccd3789824017ad1ea18c3_JaffaCakes118
Files
-
75a32bd943ccd3789824017ad1ea18c3_JaffaCakes118.exe windows:4 windows x86 arch:x86
5f5f22b2d8145e7a639c726fbe38824f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
UnregisterWaitEx
GetConsoleWindow
GetConsoleKeyboardLayoutNameA
GetExitCodeProcess
ReadConsoleA
GetModuleFileNameA
GetConsoleFontInfo
GetDefaultCommConfigA
GetConsoleCursorMode
GetStartupInfoA
GetNumberOfConsoleMouseButtons
RaiseException
_lclose
SetConsoleScreenBufferSize
GetDriveTypeA
MultiByteToWideChar
SetEvent
FindNextChangeNotification
VirtualAllocEx
ResetEvent
FindFirstFileExA
ReadConsoleOutputCharacterA
CancelTimerQueueTimer
AllocConsole
wininet
InternetCrackUrlA
InternetGetConnectedStateExA
ResumeSuspendedDownload
InternetUnlockRequestFile
InternetQueryDataAvailable
FtpSetCurrentDirectoryW
FtpRemoveDirectoryW
FtpSetCurrentDirectoryW
Sections
.itext Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 296KB - Virtual size: 392KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 936B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ