Static task
static1
Behavioral task
behavioral1
Sample
baa3edb3a16790f9edc4ea680f2bcd6b_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
baa3edb3a16790f9edc4ea680f2bcd6b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
baa3edb3a16790f9edc4ea680f2bcd6b_JaffaCakes118
-
Size
80KB
-
MD5
baa3edb3a16790f9edc4ea680f2bcd6b
-
SHA1
d602c9361b9fdf8c2d8350ccd3a95e9a800ae05b
-
SHA256
9a734c485a040e7623202da527359b40d294e8048ca8b8920343751dff83da75
-
SHA512
13d038015565d0e2552f756d722f8deb7f836523add34704fb851a114d13a2ec6198c89ee5f0a1585fc8d2a78a6381dcc3f612b238727066c24c55899fc513f3
-
SSDEEP
1536:xQQQQFhCoAzdA1eo4z1OMwlr/yHFzVNGjU82hW8fPL:nUoAZwen1OMwlrqHFpNGI8vYL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource baa3edb3a16790f9edc4ea680f2bcd6b_JaffaCakes118
Files
-
baa3edb3a16790f9edc4ea680f2bcd6b_JaffaCakes118.exe windows:4 windows x86 arch:x86
e21e65ff68942ffe4eabe108839c1598
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcmpA
CancelTimerQueueTimer
GetMailslotInfo
GetProfileSectionW
MoveFileWithProgressW
lstrlenW
FillConsoleOutputCharacterW
InvalidateConsoleDIBits
SetFileAttributesA
EnumLanguageGroupLocalesA
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rrdata Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE