Static task
static1
Behavioral task
behavioral1
Sample
144658436f9345ce13a611eaaea8e574_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
144658436f9345ce13a611eaaea8e574_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
144658436f9345ce13a611eaaea8e574_JaffaCakes118
-
Size
124KB
-
MD5
144658436f9345ce13a611eaaea8e574
-
SHA1
be0b16491f5d8fe240320f3a54619d178e0dce61
-
SHA256
68870a83dddd095f75af59ad0db6bb1d1003c990666a3ee54b800ecda0193d44
-
SHA512
235ea14cc071c20fc1defc8ca3d8dc650fc041dd3a15f1b06f222930f4db8947b5a8979f1b0cc09efa72f3a253269ba296b71fe88db57699fd89bca27633e49b
-
SSDEEP
1536:VV24rQcWAkt7GAMqbAfAGPCVJOKIlNyrJf/WAnmNeBsCXKaJnRgfDiQ/uyl:f7ZW7yb2vMKIlN6kAnmgBsckGAuy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 144658436f9345ce13a611eaaea8e574_JaffaCakes118
Files
-
144658436f9345ce13a611eaaea8e574_JaffaCakes118.exe windows:5 windows x86 arch:x86
fc615ab773839ea5e0113e413b101622
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ReadConsoleOutputA
Sections
.text Size: 74KB - Virtual size: 74KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 45KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE