Static task
static1
Behavioral task
behavioral1
Sample
d09da773cb2142399f6ccb97a6b0190b_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d09da773cb2142399f6ccb97a6b0190b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d09da773cb2142399f6ccb97a6b0190b_JaffaCakes118
-
Size
76KB
-
MD5
d09da773cb2142399f6ccb97a6b0190b
-
SHA1
02c00b0a232f7660e4fdd592c777642dec3e7611
-
SHA256
733598fa8fa4a6eec549a4321e3074dc2eea6942a78756c8fffd1faaefef4575
-
SHA512
a725d66be84628f72ef6a678ba64153c78f9e3a822a98e8a1bc218c15d3beb94683e1a92c3e6cbd4c5aecd8771dca2f65245b18b34b8017f20e0090d5e006c92
-
SSDEEP
1536:I8yi0kCn0Pbi2cyHh4oVYcWxT0aTXszhVVVpjVrs2ryrd1vUQuq6:I8yicn0PbCOHVYc8TwVVHs2qo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d09da773cb2142399f6ccb97a6b0190b_JaffaCakes118
Files
-
d09da773cb2142399f6ccb97a6b0190b_JaffaCakes118.exe windows:4 windows x86 arch:x86
1f390c7dca44c5d7398436d664744c05
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetComputerNameExA
IsDBCSLeadByte
RestoreLastError
lstrcat
MoveFileExW
ExtendVirtualBuffer
TlsFree
OpenProfileUserMapping
lstrcpy
GetVolumePathNamesForVolumeNameA
WriteConsoleInputVDMW
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.brdata Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE