Static task
static1
Behavioral task
behavioral1
Sample
850fc5606b69cf12b8e6f1005a873109_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
850fc5606b69cf12b8e6f1005a873109_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
850fc5606b69cf12b8e6f1005a873109_JaffaCakes118
-
Size
76KB
-
MD5
850fc5606b69cf12b8e6f1005a873109
-
SHA1
6634a5bb7f2ce338bbe1671049051f4aa13ab7cd
-
SHA256
13016c40acc27592131e3208f2366fcce0d0e7059fc0df3839a01480674b232f
-
SHA512
a21a189345fbf197b6837c4130ef9c018986e9ef5b40977e1b285820eaef9f6978e89897580185f3043883057194041c2486ed8a14297aa18302ce052af87670
-
SSDEEP
1536:6bEYZxR6nBLQXCk6w65gVbOnL0tbZEDg0PUwpjVrs2ryrd1vUQuq6:6Im+BQt6T5kO0tbYswHs2qo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 850fc5606b69cf12b8e6f1005a873109_JaffaCakes118
Files
-
850fc5606b69cf12b8e6f1005a873109_JaffaCakes118.exe windows:4 windows x86 arch:x86
fd96839ff0306a173016546f0b0cc4dd
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetThreadIdealProcessor
CompareStringW
EnumResourceLanguagesW
LocalCompact
SetConsolePalette
WritePrivateProfileSectionA
QueryDepthSList
SetFilePointer
PostQueuedCompletionStatus
UnlockFile
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.brdata Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE