Static task
static1
Behavioral task
behavioral1
Sample
09771e7559e4ecc3ea62d4237579c8ec_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
09771e7559e4ecc3ea62d4237579c8ec_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
09771e7559e4ecc3ea62d4237579c8ec_JaffaCakes118
-
Size
76KB
-
MD5
09771e7559e4ecc3ea62d4237579c8ec
-
SHA1
5c9487340e64fc2823392ced13a05900b4aa5d63
-
SHA256
66b847d9343fb4401e8628d6f8aa9b7849c5fdc20def6f2602ec10040a82a1b1
-
SHA512
7f56d4684ce3422f8995305a3dd08b58216437ac876fe0cb68173ebf1b74b2facf4a62421b832eace967ee07cec63ef331ac66c3d3a3f672ad9c0ef219a775c9
-
SSDEEP
1536:srf+nwiPWvYmJHxHou//uT1DzvN9FlW8LMuaEwbZvCpjVrs2ryrd1vUQuq6:sbeWQmhhoui19PWKza7xCHs2qo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 09771e7559e4ecc3ea62d4237579c8ec_JaffaCakes118
Files
-
09771e7559e4ecc3ea62d4237579c8ec_JaffaCakes118.exe windows:4 windows x86 arch:x86
21397808a06288ddf415c83163d5c274
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetConsoleCommandHistoryLengthW
SetUnhandledExceptionFilter
GlobalDeleteAtom
GetThreadPriorityBoost
RegisterConsoleIME
IsValidUILanguage
PurgeComm
FindResourceExW
LocalUnlock
LockResource
GetStringTypeExW
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.brdata Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE