Static task
static1
Behavioral task
behavioral1
Sample
790804f4c25c87ecc212492ca66f9a65_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
790804f4c25c87ecc212492ca66f9a65_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
790804f4c25c87ecc212492ca66f9a65_JaffaCakes118
-
Size
62KB
-
MD5
790804f4c25c87ecc212492ca66f9a65
-
SHA1
bb77bdb1dfa173c679d8ff31eaf489b1a5430a18
-
SHA256
0fa56a76d7e30fbc349c255ff4169b79d30487bdaa9fd443f7a8782837e82557
-
SHA512
4879001bdafa0edc35c0b4cbd49f8a6c4d5d97590600b47cc4c94930285749bee55fa7ef5be8d4a18f270da05abbb09ad8513c5562c579ff627507682963d893
-
SSDEEP
1536:+hlvLpi/IjbnppVpndBN6pKmp+213ISOa:+hlvFi8nHP7N6/13
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 790804f4c25c87ecc212492ca66f9a65_JaffaCakes118
Files
-
790804f4c25c87ecc212492ca66f9a65_JaffaCakes118.exe windows:4 windows x86 arch:x86
718dd44b42cd996d5bcebfaaf933026b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
IsValidLocale
SetErrorMode
SetHandleContext
BuildCommDCBAndTimeoutsA
LockResource
SetFileTime
SetConsoleMaximumWindowSize
VirtualFreeEx
BaseCleanupAppcompatCache
DosDateTimeToFileTime
SleepEx
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 47KB - Virtual size: 66KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE