Static task
static1
Behavioral task
behavioral1
Sample
86586117597e2dd4afbf0f5592063ea2_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
86586117597e2dd4afbf0f5592063ea2_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
86586117597e2dd4afbf0f5592063ea2_JaffaCakes118
-
Size
86KB
-
MD5
86586117597e2dd4afbf0f5592063ea2
-
SHA1
471955f51582bb94a16efb0cef7f7c42b55da4f4
-
SHA256
06ba17e8f794b8314b9df8e3ef8f9b2a8d7779125b567958ba82577ef5ea84c2
-
SHA512
a4644cefe743052735d69cb0a777fb42d9208e179dc471ac821f8998517f3cc5ddab7656acaa5a95816c7b14f72c39e1327e27d42a37b90e1233a4f006c21bb1
-
SSDEEP
1536:+jPsB80dzvPgh8c6ff74uXuS2D3GpvbjAQtNf1BnJNP7dcf7T61s5Varlj:t8WLR5MuAGpDTtNf1Njdw7T2cVarlj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 86586117597e2dd4afbf0f5592063ea2_JaffaCakes118
Files
-
86586117597e2dd4afbf0f5592063ea2_JaffaCakes118.exe windows:4 windows x86 arch:x86
7f1d20c91735a904fbd892d00942f7fc
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetGeoInfoW
FormatMessageA
UnlockFileEx
GetConsoleAliasesA
GetShortPathNameW
UnregisterConsoleIME
QueueUserWorkItem
SetConsoleCommandHistoryMode
lstrcmpi
OpenProcess
LocalFree
TransmitCommChar
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.xrdata Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE