Static task
static1
Behavioral task
behavioral1
Sample
1145eb4feab59300cf92a6a58667e3e1_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
1145eb4feab59300cf92a6a58667e3e1_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
1145eb4feab59300cf92a6a58667e3e1_JaffaCakes118
-
Size
192KB
-
MD5
1145eb4feab59300cf92a6a58667e3e1
-
SHA1
a63d664dece63718eea36a43374c4651df8f59bb
-
SHA256
636be2e4107bf8a8beee5a1957d5038edf4ba70d057206a88c982e5c2404003d
-
SHA512
c59ea3692f708a82fa9f2c6f3a58f3c21a94d463cdcfd3d61f8a0e2d677b8932052fe0081fdb026d5589a6ccfa881013fba2e0d7b9f381e4377ac71ee3b179c0
-
SSDEEP
3072:eP9t3x6W9UWeAwNffwveMIBKAeDEdeAyDoj9hqGBJIGDHM8aGXR6RxoGnAn+g+0W:gtF3eAwNfoP9JdAajGXo8dXR6Bpg5oTG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1145eb4feab59300cf92a6a58667e3e1_JaffaCakes118
Files
-
1145eb4feab59300cf92a6a58667e3e1_JaffaCakes118.exe windows:4 windows x86 arch:x86
5e7ec89d69b11ee82e25b8c8aecd2ca7
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetStartupInfoA
lstrcpyA
InterlockedExchange
ExitProcess
GetWindowsDirectoryA
HeapSize
GetFileInformationByHandle
GetCommandLineA
GetCurrentProcessId
GetCurrentThread
WriteConsoleInputA
SetConsolePalette
IsDebuggerPresent
GetSystemRegistryQuota
GetPrivateProfileStructA
CreateWaitableTimerA
GetCommandLineA
DeviceIoControl
GetProcessHandleCount
CancelTimerQueueTimer
VirtualAlloc
GetCommandLineA
DeviceIoControl
GetEnvironmentVariableA
CreateEventA
ReleaseSemaphore
BeginUpdateResourceA
WriteConsoleOutputA
ws2_32
send
Sections
.itext Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 160KB - Virtual size: 815KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ