Static task
static1
Behavioral task
behavioral1
Sample
ff6111bbcbc4e170734c8eb8d65cd156_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ff6111bbcbc4e170734c8eb8d65cd156_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ff6111bbcbc4e170734c8eb8d65cd156_JaffaCakes118
-
Size
24KB
-
MD5
ff6111bbcbc4e170734c8eb8d65cd156
-
SHA1
a1cd51b97d34f3a0ffe29a1bd9db422d6f6cb866
-
SHA256
aa2050f9b7dcd632a47d78aa4e6e7806402cc33cf8d4d749c3b134053e5641cf
-
SHA512
5477c8c1487662b98f28f7d49589ff0bd9446c96a70e393db14c485545c2b42b4e676edacd49c632fa2934501b3a333fe51addc397a98e1b3bcddeb2190042f9
-
SSDEEP
384:6ogj8NBwbOFcquQCC7aRuC2ghaAwiyy6LlBBb4z4ljpfknpaIgtxXasK:6oi8YbDquHC7+h2gJwLFkZGFK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ff6111bbcbc4e170734c8eb8d65cd156_JaffaCakes118
Files
-
ff6111bbcbc4e170734c8eb8d65cd156_JaffaCakes118.exe windows:4 windows x86 arch:x86
9326be00d109bf13ea3563c7bd049ca7
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetConsoleAliasesLengthA
HeapSize
EnumDateFormatsA
DebugActiveProcess
SetStdHandle
SystemTimeToTzSpecificLocalTime
CreateMutexW
ReplaceFileW
GetLocalTime
SetConsoleInputExeNameW
MoveFileW
InterlockedExchange
RegisterConsoleVDM
InitializeCriticalSectionAndSpinCount
user32
UserRealizePalette
GetClipCursor
GetMenuState
BringWindowToTop
KillTimer
WaitMessage
RegisterClipboardFormatA
DdeFreeDataHandle
InternalGetWindowText
ValidateRect
GetDlgItemTextA
LoadStringA
DestroyReasons
Sections
.text Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ