Static task
static1
Behavioral task
behavioral1
Sample
0e5ad84f6813c8632e7555c57b0e4e94_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0e5ad84f6813c8632e7555c57b0e4e94_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0e5ad84f6813c8632e7555c57b0e4e94_JaffaCakes118
-
Size
76KB
-
MD5
0e5ad84f6813c8632e7555c57b0e4e94
-
SHA1
e28572fafa38700b407e8cbf7839a6d8064f6c22
-
SHA256
d05a55b4a45a9674ca63f1ed9719ea83d6d2c3fd3ca9672bb8ea72848f96dd16
-
SHA512
676351ef1e3e9864414cf39238bb186b222e55c147f22963b4000ad54e36b30e9e485f280635753483288589838a09c330f181bc08d4470715fd74f89d58a419
-
SSDEEP
1536:8UvnV5vlYPolsQIbmQ1pjVrs2ryrd1vUQuq6:HvnVxlYdQItHs2qo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0e5ad84f6813c8632e7555c57b0e4e94_JaffaCakes118
Files
-
0e5ad84f6813c8632e7555c57b0e4e94_JaffaCakes118.exe windows:4 windows x86 arch:x86
4e87d0274233484548e30fb82c5cac64
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetHandleInformation
WTSGetActiveConsoleSessionId
GetConsoleMode
SetTimerQueueTimer
SetFileAttributesW
WriteFileGather
OpenSemaphoreA
GlobalAddAtomA
GetConsoleKeyboardLayoutNameA
ClearCommError
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.brdata Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE