Static task
static1
Behavioral task
behavioral1
Sample
c823cc193a7b27e40f03d22349d66ace_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
c823cc193a7b27e40f03d22349d66ace_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c823cc193a7b27e40f03d22349d66ace_JaffaCakes118
-
Size
92KB
-
MD5
c823cc193a7b27e40f03d22349d66ace
-
SHA1
d74d2f06d4df68467ddaafc8bed5697ed2742bd3
-
SHA256
44a333edb0f71dd3e10fbb6ad4ad5968ee0576be3396c726b9538deacefebe3d
-
SHA512
045fe3bb877cbc837bc63b204c21bed3b58870135557c10899269404701c0cf2133ba420008aa88db0dd063870e78d2f1fad04ab223fff6e5d9bd64fc363764a
-
SSDEEP
1536:mXXjgw06U9fvwCvZGDiLBZUilc4FJC4qZ83YacIyP/69QAq0Gb8/Z5H83oKz:icw0nlTx3GilGBKYBbWq0GQP0oKz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c823cc193a7b27e40f03d22349d66ace_JaffaCakes118
Files
-
c823cc193a7b27e40f03d22349d66ace_JaffaCakes118.exe windows:4 windows x86 arch:x86
a987959d72ae4e4937d3c29005aa24e6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FlushInstructionCache
SetFileTime
AddConsoleAliasA
SetDllDirectoryA
GetConsoleTitleW
EnumCalendarInfoExA
IsValidCodePage
lstrcmp
GetCurrentThreadId
CloseConsoleHandle
SetEnvironmentVariableA
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 36KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE