Static task
static1
Behavioral task
behavioral1
Sample
825029a9b324514be370c37d3c5b4e4f_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
825029a9b324514be370c37d3c5b4e4f_JaffaCakes118.exe
Resource
win10v2004-20240730-en
General
-
Target
825029a9b324514be370c37d3c5b4e4f_JaffaCakes118
-
Size
76KB
-
MD5
825029a9b324514be370c37d3c5b4e4f
-
SHA1
2fe00921002a4206d8f0f436ca735244389f8956
-
SHA256
39e564d823cc1e4b5b5a587ab4d3ebcb34e13f6a0c03b4d8d3691a1db2e5d2fd
-
SHA512
683f475e9df42c0b6496900624579159e7acd9407b61b8cd48f9603a8b1386600c1289af54c3130cadb5f434910931d4621b670da765a81e284a78c5c39d7305
-
SSDEEP
1536:8tNpREtONdTSsJmkcVnVjV2d7gL/Fw1PUHfpjVrs2ryrd1vUQuq6:8tNg6SsJmDoUoPUHfHs2qo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 825029a9b324514be370c37d3c5b4e4f_JaffaCakes118
Files
-
825029a9b324514be370c37d3c5b4e4f_JaffaCakes118.exe windows:4 windows x86 arch:x86
774ff4fc64b70bf1c9ba9c0f01bc4cb2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalUnfix
EnumTimeFormatsW
BaseInitAppcompatCacheSupport
CompareFileTime
DebugBreak
SetCalendarInfoW
_lopen
GetEnvironmentStringsW
FindAtomA
GetNumaProcessorMap
SetConsoleInputExeNameA
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.brdata Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE