Static task
static1
Behavioral task
behavioral1
Sample
783d8860df5936d1d8a3ed253b39ebe0_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
783d8860df5936d1d8a3ed253b39ebe0_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
783d8860df5936d1d8a3ed253b39ebe0_JaffaCakes118
-
Size
115KB
-
MD5
783d8860df5936d1d8a3ed253b39ebe0
-
SHA1
0b5021c3ffa5264b544208561ac568dfddae9f87
-
SHA256
89f21becc6f7622e801f4a34a5ed9758ddb324225c35e0fc76a78cadc66df791
-
SHA512
89e0d03d915fc4aa24de0adf17d8020e815b4ead8a561be7dbb6084f9ce63cee8457f21b8c7b20766ba04cd0886d03e1793e4778e7730c9aeb1d518ebfce422a
-
SSDEEP
3072:IYxrWSMQMVS2J5TF9MVCD3a30WPxXlndvKUjX+O:aSMQWJFC0iVdhX+O
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 783d8860df5936d1d8a3ed253b39ebe0_JaffaCakes118
Files
-
783d8860df5936d1d8a3ed253b39ebe0_JaffaCakes118.exe windows:4 windows x86 arch:x86
7a63ca0f61d55b5fd1eb74d696549272
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindNextFileW
SetDefaultCommConfigW
FillConsoleOutputAttribute
SetCommConfig
SetEnvironmentVariableW
GetFileType
DeactivateActCtx
HeapQueryTagW
GetCPFileNameFromRegistry
OpenThread
QueryDosDeviceA
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 101KB - Virtual size: 122KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE