Static task
static1
Behavioral task
behavioral1
Sample
b91a8f05bf6434399e5cbabf307e775d_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b91a8f05bf6434399e5cbabf307e775d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b91a8f05bf6434399e5cbabf307e775d_JaffaCakes118
-
Size
172KB
-
MD5
b91a8f05bf6434399e5cbabf307e775d
-
SHA1
d98c8b9ba592b47543569fff4db7b3cb0a6d17a7
-
SHA256
3c66ac2acfde2c9b372d1e771ed004f21ca44394f75589f1af06fb680429227f
-
SHA512
89680bf78223a2d1d57264d94c86028ecb6004bd3cbc0bc7dee29afd1dc475c78f95c54e689e6dc44916cd77b065710f6a30eea4d19b17689d28c196bc1c1de3
-
SSDEEP
3072:qWZ7pYb4uAqP+lu98PqZwDPZPOUQ9NcKQGhonO+ShXRNALblMDl:qWZ7Bu3Iu98PqAx2Dc/G8rShXrkblMh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b91a8f05bf6434399e5cbabf307e775d_JaffaCakes118
Files
-
b91a8f05bf6434399e5cbabf307e775d_JaffaCakes118.exe windows:4 windows x86 arch:x86
5e3e40020deae46b658aaa8a9030e1bd
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcessTimes
InterlockedCompareExchange
HeapWalk
TerminateThread
EscapeCommFunction
WritePrivateProfileSectionW
GetConsoleAliasesA
FindFirstFileExA
GetConsoleInputExeNameA
CreateFileW
UnlockFileEx
GetModuleHandleA
GetConsoleCommandHistoryA
SetCalendarInfoW
SetThreadPriorityBoost
EscapeCommFunction
GetUserDefaultLangID
GetCommandLineA
ExitProcess
GetStartupInfoA
Sections
.code Size: 4KB - Virtual size: 137KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 156KB - Virtual size: 153KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 4KB - Virtual size: 216B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ