Static task
static1
Behavioral task
behavioral1
Sample
89b4f2d81a7978192ba2abca343af3f8_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
89b4f2d81a7978192ba2abca343af3f8_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
89b4f2d81a7978192ba2abca343af3f8_JaffaCakes118
-
Size
112KB
-
MD5
89b4f2d81a7978192ba2abca343af3f8
-
SHA1
4463580c7bb81f4222433f1340dda3c011f27685
-
SHA256
941982b78caa911d4a7964056f6e4a929cb58cdb9b59b8e739cdc1fa2b09ca42
-
SHA512
e66bf76840c817ab4da3b347aff01f32e7d7c891531e7b5b8e82701f8dd9d2848d6450bc83ad74a65f0a6d757d97aef5621aa8021da0852ba14b80e3e7ae8af3
-
SSDEEP
3072:/QNYtud+cTK6byzDCfsHzaHgTLQBgdqQHCrwlLl92yIOf:/fYK6byPCfsGG0FCLv2fOf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 89b4f2d81a7978192ba2abca343af3f8_JaffaCakes118
Files
-
89b4f2d81a7978192ba2abca343af3f8_JaffaCakes118.exe windows:4 windows x86 arch:x86
4e42d23eea15f695385ec040a3888341
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetDefaultCommConfigA
GetConsoleMode
AddAtomA
ExitProcess
GetLargestConsoleWindowSize
GetDriveTypeW
TransactNamedPipe
SetEndOfFile
EnumUILanguagesA
WritePrivateProfileStructW
GetProcessHeaps
TerminateJobObject
GetStringTypeW
GetEnvironmentVariableA
SetConsoleMenuClose
LocalReAlloc
GetCommandLineA
ExitProcess
GetStartupInfoA
Sections
CODE Size: 5KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 20KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE