Static task
static1
Behavioral task
behavioral1
Sample
95a09eb0595384664ed0b9142051f4d1_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
95a09eb0595384664ed0b9142051f4d1_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
95a09eb0595384664ed0b9142051f4d1_JaffaCakes118
-
Size
58KB
-
MD5
95a09eb0595384664ed0b9142051f4d1
-
SHA1
d80f8ca9483b3be3bb4158e5289e04a9ea52b681
-
SHA256
412224a92a565fcc2de9047af921227522acb4a8ebbb693c1ee59409abdc1a34
-
SHA512
4a8960e557c482feb70636290eb068e938ccfe8e8ad853ffa14659176aeb70ea845d89d11ce1446fd20cc7e15a6109339b72dc5d71179ad67248850b0dab1fac
-
SSDEEP
768:bhgz9XFXCNg5pPHKfz4K7q5Lfli+hInyq/rdfUuc2zbMOB6vHz6BcFbLgD+EG67M:bkUetS/BVMS6/z6BWP/eCgFb2eYVZ8E
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 95a09eb0595384664ed0b9142051f4d1_JaffaCakes118
Files
-
95a09eb0595384664ed0b9142051f4d1_JaffaCakes118.exe windows:4 windows x86 arch:x86
08dd1f7d9d6c54a17d8501994fd30e00
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
GetCPFileNameFromRegistry
SetConsoleMaximumWindowSize
GlobalFlags
ReplaceFileW
OpenMutexA
FindFirstChangeNotificationA
SetConsoleMaximumWindowSize
GlobalUnlock
TerminateProcess
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 36KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE