Static task
static1
Behavioral task
behavioral1
Sample
17f6d1e97cc0a1c59d76d639093c7da0_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
17f6d1e97cc0a1c59d76d639093c7da0_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
17f6d1e97cc0a1c59d76d639093c7da0_JaffaCakes118
-
Size
76KB
-
MD5
17f6d1e97cc0a1c59d76d639093c7da0
-
SHA1
eb90bb75067c6fdc43ab76986cb7aa295830dea5
-
SHA256
04a74407298146691ad80ed13ea8c14b7becda061646015be3ec0c485c90ed45
-
SHA512
0eca83c139364122a19fa07943ef7e3a19cb4a5ee7ff5ba73b48cb294b3f32f47d381295f505dc6af0a6a3e4878c75bd92737a1f46edbd038e80203be3429be4
-
SSDEEP
1536:hUddo1hgFfqdtfezPHFynuzyrWenzjpkSVC+FlOHjNRjEErxTWDTMqhGKYIZTETw:hUA1hgFfwfezdWuzyrWqzFnBlO5RjBkX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 17f6d1e97cc0a1c59d76d639093c7da0_JaffaCakes118
Files
-
17f6d1e97cc0a1c59d76d639093c7da0_JaffaCakes118.exe windows:4 windows x86 arch:x86
8a47fe1985cda7f514c6b477158a2c26
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
UnlockFileEx
LCMapStringA
SetCommState
EnumerateLocalComputerNamesW
CreateJobObjectW
SetThreadExecutionState
SearchPathW
GetCurrentProcessId
DeleteVolumeMountPointA
DuplicateConsoleHandle
Beep
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.zrdata Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE