Static task
static1
Behavioral task
behavioral1
Sample
1015707f160346071c8194ea67685570_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
1015707f160346071c8194ea67685570_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
1015707f160346071c8194ea67685570_JaffaCakes118
-
Size
56KB
-
MD5
1015707f160346071c8194ea67685570
-
SHA1
b0d290a54c01e4c3efb990326ea25fd8e84d4d9b
-
SHA256
3ffd972cd19566f510239b806b1242688bea782f782d8fb0b2bdb23d9ed74c47
-
SHA512
c6e2e7784abe3292a54e2fad2bb665cc928da84cffad2570c85f7d2031d8f32239e0da4f475fe4610574de79da43539575a7ce3f4978a20fcfdbdd563deb41fe
-
SSDEEP
768:BDuDaNXPrn7IOeqqJo0GXl0JgXkpQA5gcMcyalU2e66DWuANY9zrNpgi9w+eD15g:AYPrnB+5gIlU2eHyebi+eThuXAVO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1015707f160346071c8194ea67685570_JaffaCakes118
Files
-
1015707f160346071c8194ea67685570_JaffaCakes118.exe windows:4 windows x86 arch:x86
1d604ac2d5a194bae658b46da80798b5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapQueryInformation
GetSystemTimes
GetThreadTimes
lstrcmpA
GetNumberOfConsoleInputEvents
GetDiskFreeSpaceExW
GetFullPathNameA
HeapQueryTagW
QueryActCtxW
EnumDateFormatsW
QueryMemoryResourceNotification
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 66KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE