Static task
static1
Behavioral task
behavioral1
Sample
a3cae285cdbd182c7500976bb61624e3_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
a3cae285cdbd182c7500976bb61624e3_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a3cae285cdbd182c7500976bb61624e3_JaffaCakes118
-
Size
160KB
-
MD5
a3cae285cdbd182c7500976bb61624e3
-
SHA1
fbcf11a8591e6210757354c0515bdda0b694fad5
-
SHA256
fec27688a0eeb932999170de367e9c40aed5462c19d5cbd7f4de7c8539270e7d
-
SHA512
0302ae1379693128968d9b87731b7226555807186d0c09c998810ff09cf09c87ec14e174654cd020a21072b5cd1f45b1b69db48043942a02b3ef0bc6a476878c
-
SSDEEP
3072:a6/qxyKCn8AOfXNnE0R2fJiqDRPrwyIgJOgMrposlKA:1/qxpAOfy0RKJXJrnxJup
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a3cae285cdbd182c7500976bb61624e3_JaffaCakes118
Files
-
a3cae285cdbd182c7500976bb61624e3_JaffaCakes118.exe windows:4 windows x86 arch:x86
f99b201f0d824f105b433fd278bea955
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
IsBadReadPtr
GetPriorityClass
GetPrivateProfileStructA
FindFirstVolumeMountPointA
lstrcmpiA
GlobalDeleteAtom
GetConsoleKeyboardLayoutNameA
RegisterWaitForSingleObjectEx
SetTapePosition
MulDiv
SetCommState
HeapValidate
GetCommandLineA
ExitProcess
GetStartupInfoA
Sections
.code Size: 8KB - Virtual size: 140KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 140KB - Virtual size: 139KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ