Static task
static1
Behavioral task
behavioral1
Sample
02c9c4ad8416b950b482d3a1a17c3705_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
02c9c4ad8416b950b482d3a1a17c3705_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
02c9c4ad8416b950b482d3a1a17c3705_JaffaCakes118
-
Size
83KB
-
MD5
02c9c4ad8416b950b482d3a1a17c3705
-
SHA1
43f800d2085948f2863a79842b2d6c2e16efdd92
-
SHA256
a20dad29a2837316316433f1178931763faa899ef35b33846102194847b12917
-
SHA512
c2d81e4b0ff598d8649801efa36fdbd44c507371322133ea25bd63097a418b52afad8e987835549b4c2717b2bfc3d3d304eabb2453b81199bf7a92d913ccac9a
-
SSDEEP
1536:zANjw+eS9JccGsbnTufAECVTboZpXjqNlz/OsNMloo9hjjEErxTWDTMqhGKYIZTE:0NU+eS9GcTnTufArTYXjkJZNMlog9jBV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 02c9c4ad8416b950b482d3a1a17c3705_JaffaCakes118
Files
-
02c9c4ad8416b950b482d3a1a17c3705_JaffaCakes118.exe windows:4 windows x86 arch:x86
f4e4fa91acc4694ec6b67d15a6ffaa19
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DebugActiveProcessStop
GetStringTypeExA
FindNextVolumeW
GetCommConfig
GetStartupInfoA
GetModuleHandleExW
SetHandleContext
RemoveLocalAlternateComputerNameA
SetCalendarInfoA
CreateTimerQueue
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.zrdata Size: 27KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE