Static task
static1
Behavioral task
behavioral1
Sample
2716ea7b0de540f72354aee20aef9db5_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2716ea7b0de540f72354aee20aef9db5_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
2716ea7b0de540f72354aee20aef9db5_JaffaCakes118
-
Size
63KB
-
MD5
2716ea7b0de540f72354aee20aef9db5
-
SHA1
7051d38c1f124148699a48c35125160666bd5a45
-
SHA256
f9252d58ccbe11f273799dbb93a9f635fd43f2013c6b69dfeb5e165fa6ba860b
-
SHA512
371da17b367dd3d3ee602c82efc1129a90b203143c4e0a8c50fd5583c39aacea2e37ff0e76d209645b0dbd8582a73ee5af6fca250e45c3b1b766a03a7bc57c8e
-
SSDEEP
1536:HAIFbRR03fvuYY9au7nyYnQgYEjmjJu2BcMDl:7jcvAUYnzY6mg2Bd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2716ea7b0de540f72354aee20aef9db5_JaffaCakes118
Files
-
2716ea7b0de540f72354aee20aef9db5_JaffaCakes118.exe windows:4 windows x86 arch:x86
18321dee43e2cc2f6b5ea12d7b77cb00
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetNamedPipeHandleState
SetConsoleActiveScreenBuffer
GetDateFormatA
RegisterConsoleOS2
OpenSemaphoreA
EnumCalendarInfoW
FindFirstChangeNotificationA
GetCommandLineA
QueryDosDeviceA
DeleteCriticalSection
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 49KB - Virtual size: 70KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE