Static task
static1
Behavioral task
behavioral1
Sample
959980f330cc163cdcc71256def4ee1a_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
959980f330cc163cdcc71256def4ee1a_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
959980f330cc163cdcc71256def4ee1a_JaffaCakes118
-
Size
66KB
-
MD5
959980f330cc163cdcc71256def4ee1a
-
SHA1
8fd963db7926f167f6603373a821cef33650645a
-
SHA256
ab31e6e2cc809c7abdcb88d77fa1b2a74d9fb4658ec236f94534b80d4d8676aa
-
SHA512
c3f3734290a88401fe7d63d0c04e3a0fa03b05f684419d90bca88f540eb0b7713f595354388a534324fce5a977c376323f89fc0cfe026786eec912e4b2b3d6b0
-
SSDEEP
1536:V+orQOLAC130p6NYtXF/t0Aqx5n/uleP9KHXw7uqEyV1kH3+:VxA80pDdt0VYg1KHA7uqEygH3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 959980f330cc163cdcc71256def4ee1a_JaffaCakes118
Files
-
959980f330cc163cdcc71256def4ee1a_JaffaCakes118.exe windows:4 windows x86 arch:x86
aaa55bfe93ab486e5d57053d4e65710b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetLocaleInfoW
SetConsoleCursor
FatalAppExitW
SetFileApisToOEM
CreateFileW
GetStartupInfoA
RtlCaptureContext
GetTimeFormatW
WriteConsoleOutputA
CreateProcessInternalWSecure
DosDateTimeToFileTime
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE