Static task
static1
Behavioral task
behavioral1
Sample
ab42871e38ff86013b917a3513891734_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
ab42871e38ff86013b917a3513891734_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ab42871e38ff86013b917a3513891734_JaffaCakes118
-
Size
27KB
-
MD5
ab42871e38ff86013b917a3513891734
-
SHA1
9f7412ef88a8d39770f8d1c4233428506d0df4f8
-
SHA256
187b7f5f12c881ce69c0fde48ac40be7792bfd8de369af002604cbd414288a07
-
SHA512
fd0281f44d8d1c6b1643a2b5fa7437d638706cdd2e29a9bc5f6734f0a7f91944f9decc76890da7191bc23b106772cbcf1c3488fa690b11a3cd46b2ac1a7493de
-
SSDEEP
768:TlNsv6UM3DpwrF9iXVCjhUgGjyzhVo+dGi7UtVu:Tsv6xq6XVe0ydp7au
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ab42871e38ff86013b917a3513891734_JaffaCakes118
Files
-
ab42871e38ff86013b917a3513891734_JaffaCakes118.exe windows:4 windows x86 arch:x86
aed7ea4330669875b9d1a88300f20ad9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateDirectoryA
EnumCalendarInfoExA
FindFirstFileA
CommConfigDialogW
GetStringTypeExW
GetConsoleAliasExesA
ReadConsoleOutputCharacterA
GetConsoleKeyboardLayoutNameW
GetWindowsDirectoryW
GetEnvironmentStringsA
CreateNamedPipeW
OpenWaitableTimerA
user32
DefWindowProcW
OpenWindowStationA
DlgDirListComboBoxA
SystemParametersInfoW
IsCharAlphaNumericW
DrawTextExW
gdi32
ResetDCA
ResetDCA
GetTextMetricsA
StartDocA
GetLogColorSpaceW
GetKerningPairsW
Sections
.code Size: - Virtual size: 17.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.code Size: 19KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data? Size: 1024B - Virtual size: 908B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.fasm Size: 1024B - Virtual size: 813B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ