Static task
static1
Behavioral task
behavioral1
Sample
a7d1397e03b9c7e53900eba9a9fd6895_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
a7d1397e03b9c7e53900eba9a9fd6895_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a7d1397e03b9c7e53900eba9a9fd6895_JaffaCakes118
-
Size
88KB
-
MD5
a7d1397e03b9c7e53900eba9a9fd6895
-
SHA1
8c50052aa8a816bfc9d11904fb9ff8a751d413bd
-
SHA256
ee20a4ad4cdd47e3380e7d867bff01993aec44c93956a9cb169859d1c75b22e4
-
SHA512
20dcf840678b373476bd4c7d30507e792c95fc82e8122349d686f68ba3cf1f7deceacf0ed20112e435fd7aaca7eeeafd44c5c72c9fe52d419f037361af06c40d
-
SSDEEP
1536:jEw4SjUojH12RJ/Zz5AHLwnnUA5SYjodrZXnB6QA5kiCIV+1V4lF/b7K8YogJy7J:jVZuLGLwnArZXTAWirgar/y8Egl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a7d1397e03b9c7e53900eba9a9fd6895_JaffaCakes118
Files
-
a7d1397e03b9c7e53900eba9a9fd6895_JaffaCakes118.exe windows:4 windows x86 arch:x86
dabdb7a6d73584c47692fc30b31ec6e7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetConsoleCP
WaitNamedPipeW
EnumDateFormatsExA
GetFileInformationByHandle
GetSystemTimeAsFileTime
FindAtomW
InterlockedExchange
GetConsoleCursorInfo
DnsHostnameToComputerNameA
OpenFileMappingW
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 77KB - Virtual size: 98KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE