Static task
static1
Behavioral task
behavioral1
Sample
8ace4e2fe094a56bca782d173c3f043e_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
8ace4e2fe094a56bca782d173c3f043e_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8ace4e2fe094a56bca782d173c3f043e_JaffaCakes118
-
Size
61KB
-
MD5
8ace4e2fe094a56bca782d173c3f043e
-
SHA1
939f6767ebbb7a898ce4b0ebe16137c22994f98d
-
SHA256
ded7c2f2ef3b1e37bb0aaa43bdc6978f9136fcfa2e38e31ca70312cca1394fba
-
SHA512
794706465af62078a10f0f3929263300566b44c7e0ce5eae6619b8c010626612c67418f4a3cd1566e5b8e09fc40b5781b952d0074190460ed049fc9b71d637b4
-
SSDEEP
1536:B4JD+n6jL2TBNIXcBInmruwNfkJfcoiJFyWBtrwiTRpin/R/ANc1nBsWjz:qN+YL2NC+dsJkoivygtrwiTRpo/pANcJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8ace4e2fe094a56bca782d173c3f043e_JaffaCakes118
Files
-
8ace4e2fe094a56bca782d173c3f043e_JaffaCakes118.exe windows:4 windows x86 arch:x86
167875f1428d9a555b8940c772f77a78
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SwitchToFiber
GetProcessVersion
SetConsoleWindowInfo
GetTimeFormatW
GetPrivateProfileStructW
LockFileEx
ScrollConsoleScreenBufferW
SetHandleCount
CreateNamedPipeA
SearchPathW
BeginUpdateResourceW
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 47KB - Virtual size: 65KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE