Static task
static1
Behavioral task
behavioral1
Sample
857fe3b30bc1f8a7ec4b73cb8dd38d3d_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
857fe3b30bc1f8a7ec4b73cb8dd38d3d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
857fe3b30bc1f8a7ec4b73cb8dd38d3d_JaffaCakes118
-
Size
46KB
-
MD5
857fe3b30bc1f8a7ec4b73cb8dd38d3d
-
SHA1
e829cc3b64b831534b74d9c7bdce5980ccbae6df
-
SHA256
2a152edbffe210ec539e84015e374d5ea83ca95b1ffdea671d08e3b186b340f9
-
SHA512
3c2d23d8f3e6eb77462ec58d8e4c0d23dd22ebcc959a57279e2eece4805b07effd1fb744bab97cfc9dd3d512e019ed68ab31a50c29ebffd85e67b388b10a73f8
-
SSDEEP
768:l4wjhNdfkOkaV0t8ti+iSvoFURIEeD0eyhoDcDa2p/nmWsuDF5:O8NNkODV0Qi+gFUaRWDXpn68f
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 857fe3b30bc1f8a7ec4b73cb8dd38d3d_JaffaCakes118
Files
-
857fe3b30bc1f8a7ec4b73cb8dd38d3d_JaffaCakes118.exe windows:4 windows x86 arch:x86
a2a90586b6b672ffcba5f1c83220af7b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetNamedPipeHandleStateA
GetTimeFormatA
GetFileType
CreateFileA
GetCommandLineA
ExitProcess
GetStartupInfoA
Sections
itext Size: 4KB - Virtual size: 96KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
idata Size: 38KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
idata Size: 1024B - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 648B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ