Static task
static1
Behavioral task
behavioral1
Sample
a29173b1ccbc85fbf9626702eaf435ef_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
a29173b1ccbc85fbf9626702eaf435ef_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a29173b1ccbc85fbf9626702eaf435ef_JaffaCakes118
-
Size
147KB
-
MD5
a29173b1ccbc85fbf9626702eaf435ef
-
SHA1
27bd00ddf10640b1a24bf1bfaf30f90c8fa8cff5
-
SHA256
ee90b2e5df369b9127924790279243093b0226613073ae771692f4aea13676a6
-
SHA512
b75a5a57f5b7350143ef164964e4f6b74b74b57eee06319694a1c73e9ca039d6b96a23204d95f4d8c236fe5feea655946b8d2096783c0a7f5743c3bb23557980
-
SSDEEP
3072:cnNIqW2OwqJkyDPjQerlJ1l3um2e7zk7raeW/xLbL09/i1rz:cHWmqJEerlJPkvALX2/i5z
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a29173b1ccbc85fbf9626702eaf435ef_JaffaCakes118
Files
-
a29173b1ccbc85fbf9626702eaf435ef_JaffaCakes118.exe windows:4 windows x86 arch:x86
fe9247d3c4e53c3a623fe5900dcd5662
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
EnumResourceTypesA
GetExitCodeProcess
WriteConsoleOutputCharacterW
CreateActCtxA
CommConfigDialogW
CreateSocketHandle
GetStdHandle
WriteConsoleOutputCharacterA
BuildCommDCBW
RequestDeviceWakeup
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 133KB - Virtual size: 150KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE