Static task
static1
Behavioral task
behavioral1
Sample
0f029fe1b455260e14c5f18a3d2a9111_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
0f029fe1b455260e14c5f18a3d2a9111_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0f029fe1b455260e14c5f18a3d2a9111_JaffaCakes118
-
Size
76KB
-
MD5
0f029fe1b455260e14c5f18a3d2a9111
-
SHA1
183d089d89c506da5da78e7e712dcd47156fa3c5
-
SHA256
73840fac0090507c6fafb9ef36039d83612d19c44d4c7c099698c8cb9752178a
-
SHA512
71cf84609c2887e3c38f9d47bfeb4eb348cd66a274abe5b9357a5b952946ef9e8c0778c9068795b985ceabe662ae99322db0996a31df180eb206d6774dec205a
-
SSDEEP
1536:InImGvE+mbK+ZkHzcEJhmC3sK6rZJxTL+mpjVrs2ryrd1vUQuq6:IDizcEJ0nXxnrHs2qo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0f029fe1b455260e14c5f18a3d2a9111_JaffaCakes118
Files
-
0f029fe1b455260e14c5f18a3d2a9111_JaffaCakes118.exe windows:4 windows x86 arch:x86
6a76b87f3a954d08a20494446fa7bc66
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetTimeZoneInformation
GetSystemDirectoryW
GetConsoleWindow
GetSystemDirectoryW
IsValidLocale
AssignProcessToJobObject
PeekConsoleInputW
GlobalHandle
GetConsoleScreenBufferInfo
GetThreadLocale
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.brdata Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE