Static task
static1
Behavioral task
behavioral1
Sample
8dc870e6d8eb5e20d10e683d08847bd7_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
8dc870e6d8eb5e20d10e683d08847bd7_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8dc870e6d8eb5e20d10e683d08847bd7_JaffaCakes118
-
Size
76KB
-
MD5
8dc870e6d8eb5e20d10e683d08847bd7
-
SHA1
48a8fbb3cac457583d56a32d5494dd40553f1704
-
SHA256
b09934a1ffe1faa6ad14c3f3ca0766bff4b1154f9f125e2575c66ed80f86ebe8
-
SHA512
845eb7a423638cf645850e8afbc30e39a408866cd0608827637570a682851411314b761f942898d1ee1ddaeba41857c2b5c8a5c408508b30c5e3365ef12911a2
-
SSDEEP
1536:qYhlOkM5i6FhU8mfSLv2QLlTEC8BpQsh3vsA7uLj2DaCy+pjVrs2ryrd1vUQuq6:qglKi6FhUHfUnuC8BpxhUA7DDm+Hs2qo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8dc870e6d8eb5e20d10e683d08847bd7_JaffaCakes118
Files
-
8dc870e6d8eb5e20d10e683d08847bd7_JaffaCakes118.exe windows:4 windows x86 arch:x86
08ad07b5ef5cefd32075381013e68e79
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetPrivateProfileIntW
GetCommandLineA
HeapLock
GetNlsSectionName
VerifyConsoleIoHandle
InitAtomTable
GetCalendarInfoW
GetConsoleAliasExesLengthW
GetNumaAvailableMemory
CloseHandle
SetCriticalSectionSpinCount
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.brdata Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE