Static task
static1
Behavioral task
behavioral1
Sample
c90b689e0d88278932041273f147ea8e_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
c90b689e0d88278932041273f147ea8e_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c90b689e0d88278932041273f147ea8e_JaffaCakes118
-
Size
133KB
-
MD5
c90b689e0d88278932041273f147ea8e
-
SHA1
05fd707aec4770da5c6ee4764d6da0969f20a160
-
SHA256
2368d38e7af6029e5ac14dea5b545a2068e25b386e85dbcabe0606d0f324062a
-
SHA512
f7f9a4bb53a1e90ca43534deef56022c0b317092099119327be3f3f3cb553f1f07c345a37b324d0a6e8a1621758dc4db025c2940fae050f830f57de4ff8e032f
-
SSDEEP
3072:tfATnJg7dsZ+nM480E0cIu9D2H4lggFahHYMd7vL/3LJig2T2x:9AdeCZIuQFYYL/7J2m
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c90b689e0d88278932041273f147ea8e_JaffaCakes118
Files
-
c90b689e0d88278932041273f147ea8e_JaffaCakes118.exe windows:4 windows x86 arch:x86
fc91dd850daa226545abd23e570b2c0d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetConsoleTitleW
GetProfileIntA
GetAtomNameA
ReplaceFile
SetThreadIdealProcessor
SetPriorityClass
DosPathToSessionPathA
SetConsoleTitleA
GetConsoleAliasesLengthW
ExitProcess
GetConsoleCommandHistoryLengthA
GlobalCompact
CreateFileMappingA
GetSystemDefaultLangID
GetComputerNameExA
SetTimerQueueTimer
InitializeCriticalSectionAndSpinCount
WritePrivateProfileSectionA
GetTapeStatus
BuildCommDCBAndTimeoutsA
GetCurrentDirectoryA
IsDBCSLeadByte
ProcessIdToSessionId
SetConsoleInputExeNameW
SetCurrentDirectoryA
_lopen
SetLastError
SetThreadIdealProcessor
DosDateTimeToFileTime
GlobalMemoryStatusEx
CreateFileA
SizeofResource
MoveFileExW
CloseConsoleHandle
Sections
.data Size: 8KB - Virtual size: 137KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 112KB - Virtual size: 110KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 4KB - Virtual size: 164B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ