Static task
static1
Behavioral task
behavioral1
Sample
15cf6574bc7a274e81f1f65a6fd54168_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
15cf6574bc7a274e81f1f65a6fd54168_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
15cf6574bc7a274e81f1f65a6fd54168_JaffaCakes118
-
Size
46KB
-
MD5
15cf6574bc7a274e81f1f65a6fd54168
-
SHA1
a2cc7e3b9186d9bcae959e7b5ea45746e712cf03
-
SHA256
9038ac53faf4fd941fb963c240abb6dd3267702f22be089598c6bf4d65891bce
-
SHA512
d7cbb75082beb13a0c33d231108c62db8cf2c149312db5e598d3fb100d7e60137dbe4c926e48440ecda2cfdf41de9f27e9dc4f3dbbce71deb5fe68f7bb8dbd6f
-
SSDEEP
768:HQV9wQmf+fSAAXSrjlcuGmNXUABrnnECS8ptVFT0l0iU2chjIBG18Lze:wqGZNX3nECS8DXJ18
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 15cf6574bc7a274e81f1f65a6fd54168_JaffaCakes118
Files
-
15cf6574bc7a274e81f1f65a6fd54168_JaffaCakes118.exe windows:4 windows x86 arch:x86
ad07ecd5aa617afdd6347f53bbc549a4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
GetLastError
RtlUnwind
HeapCreate
HeapDestroy
HeapAlloc
HeapReAlloc
HeapFree
HeapSize
HeapValidate
ExitProcess
GetSystemTimeAsFileTime
GetStartupInfoA
GetFileType
GetStdHandle
GetCurrentProcess
DuplicateHandle
SetHandleCount
GetCommandLineA
GetModuleFileNameA
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetConsoleMode
GetConsoleOutputCP
WriteFile
SetStdHandle
DeleteFileA
SetConsoleCtrlHandler
VirtualAlloc
VirtualQuery
CreateFileA
ReadFile
GetConsoleCP
MultiByteToWideChar
SetFilePointer
WideCharToMultiByte
SetEndOfFile
Sections
.text Size: 37KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE