Static task
static1
Behavioral task
behavioral1
Sample
fef85c687e26bfd8de07778e2fedbfaa_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fef85c687e26bfd8de07778e2fedbfaa_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fef85c687e26bfd8de07778e2fedbfaa_JaffaCakes118
-
Size
76KB
-
MD5
fef85c687e26bfd8de07778e2fedbfaa
-
SHA1
e10327c50c224a139dc9f9d55e5dc35a73fd221b
-
SHA256
6392f4757606b0e98278eca9d22deaa4f6f4beae0f9ed4a686740194bd80ee64
-
SHA512
c6d3fe16a82e33d95a405ebf74e39a7b651993128fdea100eb5b6a69c27b87c0bb5b59811a75657c86f3a71bec70a766625f5475f22212c23d119e560ec7b238
-
SSDEEP
1536:goquco++cMFzMUcI1sk6knx5cZSLFukNfVAUE/LpjVrs2ryrd1vUQuq6:wj+cMVH6knx+ZyFnNtAUEDHs2qo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fef85c687e26bfd8de07778e2fedbfaa_JaffaCakes118
Files
-
fef85c687e26bfd8de07778e2fedbfaa_JaffaCakes118.exe windows:4 windows x86 arch:x86
62c2a1ac98101ccce82f03246a55194a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CopyFileA
lstrcatA
SetTimerQueueTimer
LocalUnlock
GetCalendarInfoW
InitAtomTable
IsBadCodePtr
SetLocalPrimaryComputerNameW
NlsConvertIntegerToString
VDMConsoleOperation
GetDefaultCommConfigW
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.brdata Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE