Static task
static1
Behavioral task
behavioral1
Sample
b450de0d78adcc4be08bc53a4dc3983d_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
b450de0d78adcc4be08bc53a4dc3983d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b450de0d78adcc4be08bc53a4dc3983d_JaffaCakes118
-
Size
76KB
-
MD5
b450de0d78adcc4be08bc53a4dc3983d
-
SHA1
1510cc1077e4d1fecc9bc5ac3f688011f47506aa
-
SHA256
7459a05074e98824d3281aa17cb2dc9ba4dcc37b83eae8ac81afb618a3c0ab7e
-
SHA512
c6380b0e4ffe38f497e0981329f9f1510858c11b119494a82e833d95e750b93afc46a7e91225ccc6cfcc4f6aebecd80fd576d866f057ef6f84ca5b8315cbf79b
-
SSDEEP
1536:89ccccPEmIzJPXuqCm2lZDVFlVzrD1hhEWx2VGyAhVoypjVrs2ryrd1vUQuq6:8VEmIzJPXuqC3lZDVFnrD3hEQMOYyHso
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b450de0d78adcc4be08bc53a4dc3983d_JaffaCakes118
Files
-
b450de0d78adcc4be08bc53a4dc3983d_JaffaCakes118.exe windows:4 windows x86 arch:x86
df917f61e046f8a54a9d3abb716d9840
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetConsoleNlsMode
PulseEvent
ConsoleMenuControl
DnsHostnameToComputerNameW
ReadFile
FormatMessageA
GetCurrencyFormatW
FindAtomW
HeapUnlock
GlobalGetAtomNameA
GetTimeZoneInformation
FindResourceA
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.brdata Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE