Static task
static1
Behavioral task
behavioral1
Sample
ab978b02aea4fe53823752cc77d1c97c_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
ab978b02aea4fe53823752cc77d1c97c_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ab978b02aea4fe53823752cc77d1c97c_JaffaCakes118
-
Size
76KB
-
MD5
ab978b02aea4fe53823752cc77d1c97c
-
SHA1
e8db725dfd7956085e6dd35ea74829c66c2d2085
-
SHA256
67236378fa75c972505d98c991887084d330f049ece4008d39bb4499ee9ac600
-
SHA512
54fc6b43275589cab3b54185999c6fe6e402cea130e18c08e790b182756a42d27e1a66718f3c401fbfc60cfe84afdfeb14f69c70d81c5bdd813009a4c8344b63
-
SSDEEP
1536:Deed9uqZjCPGcC/xGGEnTLc54MrIUMaxSpC+NpjVrs2ryrd1vUQuq6:6er3+GcC/xrGm4cL5OC+NHs2qo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ab978b02aea4fe53823752cc77d1c97c_JaffaCakes118
Files
-
ab978b02aea4fe53823752cc77d1c97c_JaffaCakes118.exe windows:4 windows x86 arch:x86
8d7621920292577f23a1e02696ace391
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapSetInformation
DefineDosDeviceW
GetSystemPowerStatus
GetConsoleCommandHistoryLengthW
GetNumaHighestNodeNumber
SetErrorMode
GetExitCodeProcess
GetModuleHandleA
GetConsoleInputExeNameW
HeapSetInformation
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.brdata Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE