Static task
static1
Behavioral task
behavioral1
Sample
8e22086018d08816cb0953e0b60a97b1_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
8e22086018d08816cb0953e0b60a97b1_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8e22086018d08816cb0953e0b60a97b1_JaffaCakes118
-
Size
76KB
-
MD5
8e22086018d08816cb0953e0b60a97b1
-
SHA1
a167c420377fe18be8416147a7bdec554d94afc4
-
SHA256
52cbb6ae4efb3c70ba974c6d2382b4a09c97f0c89c5bbb3d454079f5daee1743
-
SHA512
96ccde5ea4b2ecf830d3f0f54f606455a4d44284d5a911abbffea8ec3b278ed3432acbe81d84e7f07c905a9e646652e2fbb5f829eec13c8b944b203e982c2799
-
SSDEEP
1536:bUXd8z4NrP41PbTcUrgOS8dmRzykmfT6JFFpZMJhpjVrs2ryrd1vUQuq6:bUuz4Nr41PbTcSgOxUzyn6JFFpZuHs2N
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8e22086018d08816cb0953e0b60a97b1_JaffaCakes118
Files
-
8e22086018d08816cb0953e0b60a97b1_JaffaCakes118.exe windows:4 windows x86 arch:x86
455d0bf766a98dee88da485e82c80d85
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetPriorityClass
GetCurrencyFormatA
GetSystemInfo
ReadDirectoryChangesW
lstrcpy
GetPrivateProfileSectionNamesA
FlushConsoleInputBuffer
SetFileTime
lstrcmpA
OpenSemaphoreA
GetCurrentDirectoryA
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.brdata Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE