Static task
static1
Behavioral task
behavioral1
Sample
b00eaa7318245ce85af2618fee9e3335_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
b00eaa7318245ce85af2618fee9e3335_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b00eaa7318245ce85af2618fee9e3335_JaffaCakes118
-
Size
20KB
-
MD5
b00eaa7318245ce85af2618fee9e3335
-
SHA1
49d130b8cc15a3d26b26c62309a75c76cdb34754
-
SHA256
63170914835c3e118ad457adf3112d116974e71550d952f53b0ed4d5921140ff
-
SHA512
e8f3234719bc01f8da875c8f9b58ff162ac1912d84cfa723cf4bba3425e4e98256d571ea8f11ccfe107e4957ecf80c9a9c187ef31288be96c6b10c17a3aa59b6
-
SSDEEP
384:IUWTqmbuf0J0yX+QOilQCUZ4iqzttgX+Wj+gXvHGPDhfLxHc:cqE6YXllQCU4dUOWj/GPVfLK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b00eaa7318245ce85af2618fee9e3335_JaffaCakes118
Files
-
b00eaa7318245ce85af2618fee9e3335_JaffaCakes118.exe windows:4 windows x86 arch:x86
a62069313afb9223944ffeca19c62f65
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetSystemTimeAsFileTime
GetNumberOfConsoleFonts
lstrcat
GetCommandLineA
ExitProcess
GetStartupInfoA
Sections
itext Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
text Size: 12KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
idata Size: 1024B - Virtual size: 996B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 688B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ