Static task
static1
Behavioral task
behavioral1
Sample
0f18c8b7d24fcced24dcf7ad2ae9ce17_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0f18c8b7d24fcced24dcf7ad2ae9ce17_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0f18c8b7d24fcced24dcf7ad2ae9ce17_JaffaCakes118
-
Size
83KB
-
MD5
0f18c8b7d24fcced24dcf7ad2ae9ce17
-
SHA1
7f344bda53b515230bd59d86adb7f9ef44c5871c
-
SHA256
dc12f6279c77402137c92f9e8159a4c17f04cfb1b616f760c2dc3b3d60075303
-
SHA512
3cb2b4463b6ba81e9e9243c484a76a4dd381d98a61f4f41c1d411d5950c8c8febc526108c1b326107f4b2812be6415e9044df9373fc0e5fc2da4c5cb09985e6f
-
SSDEEP
1536:Q8y5t2uz+gwhv+WDVaK5cJGWfQ/SgPjzS1pjVrs2ryrd1vUQuqwcizSkX:hKt2uAN+WD1SJGWUSgbzuHs2quciu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0f18c8b7d24fcced24dcf7ad2ae9ce17_JaffaCakes118
Files
-
0f18c8b7d24fcced24dcf7ad2ae9ce17_JaffaCakes118.exe windows:4 windows x86 arch:x86
72e2700ccdb379c33011e135ba2875ff
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
GetNumaProcessorMap
TlsSetValue
GetCommState
GetModuleHandleExA
OpenEventA
WaitNamedPipeA
GetConsoleKeyboardLayoutNameW
AddConsoleAliasA
lstrcmpi
HeapLock
WTSGetActiveConsoleSessionId
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.brdata Size: 27KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE