Static task
static1
Behavioral task
behavioral1
Sample
96cee41eaf5fb1b3adf73cac50fa0ffe_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
96cee41eaf5fb1b3adf73cac50fa0ffe_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
96cee41eaf5fb1b3adf73cac50fa0ffe_JaffaCakes118
-
Size
83KB
-
MD5
96cee41eaf5fb1b3adf73cac50fa0ffe
-
SHA1
3ebb063cb56c981c95ea21e9e3a48f9bf6e85b53
-
SHA256
bfde2943a216243753179aab5a28c363fda6d7c3edf928d12034f638c7c97414
-
SHA512
80c6b448d39d40c5a1fcb4632e1ff576863bbe50479e559846ba8ee6e993c587ba8f52b3258cbf108708800fb0153449262a7dd58029a839e15207c1c1628e85
-
SSDEEP
1536:t9HK2VRNtwEls65nxnC1oAjxz4X7e1iu43mmc+pjVrs2ryrd1vUQuqwcizSkX:td5LwElsUnkoKz+7e1b43m8Hs2quciu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 96cee41eaf5fb1b3adf73cac50fa0ffe_JaffaCakes118
Files
-
96cee41eaf5fb1b3adf73cac50fa0ffe_JaffaCakes118.exe windows:4 windows x86 arch:x86
f2f46e2b0233448005a9639ebbed5357
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcessHeap
ScrollConsoleScreenBufferA
EnumUILanguagesA
EnumSystemCodePagesA
SetTimerQueueTimer
CommConfigDialogW
CreateWaitableTimerA
IsBadStringPtrA
FindActCtxSectionGuid
SetSystemTime
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.brdata Size: 27KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE