Static task
static1
Behavioral task
behavioral1
Sample
b80d7a17c78c81d660f276b46ff21cc8_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
b80d7a17c78c81d660f276b46ff21cc8_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b80d7a17c78c81d660f276b46ff21cc8_JaffaCakes118
-
Size
76KB
-
MD5
b80d7a17c78c81d660f276b46ff21cc8
-
SHA1
ef612952f24c5b37262103c481d083d7f275fa4e
-
SHA256
eeacea6080a373172ea2ab974f4327d1b7303724be2fd9876acc7346eb9c35e1
-
SHA512
b9fc96f1e63d84541760c281b572452763d0815a7f4fdaaaa621cbb0bc97ab6fe1dd32cff25d98e085440b9a389dd74369347302f7c4257dc076c3e9b94b4612
-
SSDEEP
1536:4MMMMZb11/Mvb39ZkwudRtRLMwqblXGjEErxTWDTMqhGKYIZTET8x:UbnUzDgdRtRQwqRGjBkMqhGKZTbx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b80d7a17c78c81d660f276b46ff21cc8_JaffaCakes118
Files
-
b80d7a17c78c81d660f276b46ff21cc8_JaffaCakes118.exe windows:4 windows x86 arch:x86
09800f2fa0351b8797a07993bec97a52
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetCommState
Heap32Next
ReleaseActCtx
GetVersionExA
SetFileAttributesW
WaitNamedPipeA
LoadResource
RequestWakeupLatency
CreateNamedPipeA
SuspendThread
DebugActiveProcessStop
Heap32ListFirst
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.zrdata Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE