Static task
static1
Behavioral task
behavioral1
Sample
0f8a0d9fb18b71a8fd51d7bfd79f1b71_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0f8a0d9fb18b71a8fd51d7bfd79f1b71_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0f8a0d9fb18b71a8fd51d7bfd79f1b71_JaffaCakes118
-
Size
69KB
-
MD5
0f8a0d9fb18b71a8fd51d7bfd79f1b71
-
SHA1
20e35583a574162a0682d413a4b70a74c23c67e2
-
SHA256
c3a326c30f91d4a76e47491f8ec39707a5bc7a11a7ff54f538290106d01b5bea
-
SHA512
c739591c5dd540562a9bb6789bd134f7ffccb5a322d7f8ce419fe0eae7fb8cd4283a6dd1000996e3c3c6f44b9be96cf66b17d436ce7a2b17337976445fdafc18
-
SSDEEP
1536:oOsicxbJ4nzJjW1xu6hJu6DVDOfLZV5oGReqTIduEeDL9:Zsi+GtuFlGZV5rDTIduH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0f8a0d9fb18b71a8fd51d7bfd79f1b71_JaffaCakes118
Files
-
0f8a0d9fb18b71a8fd51d7bfd79f1b71_JaffaCakes118.exe windows:1 windows x86 arch:x86
e631cf950ea3121dae9ec65c382b7f0c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FillConsoleOutputAttribute
FillConsoleOutputCharacterA
FlushConsoleInputBuffer
GetConsoleMode
GetConsoleScreenBufferInfo
CloseHandle
ReadConsoleA
ReadConsoleOutputA
ReadConsoleOutputW
ReadConsoleW
RtlUnwind
ScrollConsoleScreenBufferA
SetConsoleCursorInfo
SetConsoleCursorPosition
SetConsoleMode
SetConsoleTextAttribute
CreateFileA
WriteConsoleA
WriteConsoleOutputA
WriteConsoleOutputW
WriteConsoleW
lstrlenA
lstrlenW
user32
MessageBoxA
crtdll
_iob
_itoa
__GetMainArgs
_stricmp
_strnicmp
toupper
abort
exit
fclose
ferror
fgetc
fopen
fputc
free
fwrite
getchar
localeconv
malloc
memcpy
memmove
memset
pow
raise
signal
strcat
strchr
strcmp
strncmp
strtol
ungetc
wcslen
wctomb
Sections
.text Size: 34KB - Virtual size: 34KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 692B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 88B - Virtual size: 88B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE