Static task
static1
Behavioral task
behavioral1
Sample
fe77799c14d496a0d3aa4c0ef8b1db96_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fe77799c14d496a0d3aa4c0ef8b1db96_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fe77799c14d496a0d3aa4c0ef8b1db96_JaffaCakes118
-
Size
64KB
-
MD5
fe77799c14d496a0d3aa4c0ef8b1db96
-
SHA1
07d08a2e543be4ef70dce08e1cb5506898edf443
-
SHA256
8d8c0b5a519430cca2a09c150a4dd4f5991bcc922cb5b5006a4b0032698785f3
-
SHA512
35df3c96e080f3c2c6c9dad95772a0d058756af9218dc4668a6b5daa4bb705f77b75a118edd6b6e8f5587ea78c3aa5e6f942905f229c50561e965eee93728033
-
SSDEEP
768:6L5/WHIbg46ZPJxg35Op1U8om8gODRh0n4ewziP+U9VSyue9bA5V/qQL6a0yoJ5C:aUYgTxgAKr/0YeP++R9KNxHZoGB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fe77799c14d496a0d3aa4c0ef8b1db96_JaffaCakes118
Files
-
fe77799c14d496a0d3aa4c0ef8b1db96_JaffaCakes118.exe windows:4 windows x86 arch:x86
c45e600a75dc928a5db3e234826ef04b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetErrorMode
GetConsoleCommandHistoryA
SwitchToThread
IsBadWritePtr
GetCommandLineA
ExitProcess
GetStartupInfoA
Sections
icode Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
idata Size: - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
idata Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
idata Size: 4KB - Virtual size: 772B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ