Static task
static1
Behavioral task
behavioral1
Sample
299fb04e7521297ed2147cbbb0fa0e64_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
299fb04e7521297ed2147cbbb0fa0e64_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
299fb04e7521297ed2147cbbb0fa0e64_JaffaCakes118
-
Size
76KB
-
MD5
299fb04e7521297ed2147cbbb0fa0e64
-
SHA1
8acba2ad822dca99a89ae8dee41bd9f7171b026c
-
SHA256
f250848f55fff9a1508292f4f23df7ae8dc2806d28c9c624810d0dff12edf7c5
-
SHA512
2e854127bbd65c7f8530c7a60dcf143d816f4a2a881b86661a4aea26cc3d59e2b449e857373a93c1ddd3b67f405760123134230b531426630d3a3e69f04db37a
-
SSDEEP
1536:Ls1SUwRR++GMyAWd3GZvG+gJPourZYRSHgv/I0RjDpjVrs2ryrd1vUQuq6:Lsk3j+7MKGJaPZMUgv//RXHs2qo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 299fb04e7521297ed2147cbbb0fa0e64_JaffaCakes118
Files
-
299fb04e7521297ed2147cbbb0fa0e64_JaffaCakes118.exe windows:4 windows x86 arch:x86
d222c2407f96c28637b2453f926d931a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
BasepCheckWinSaferRestrictions
FindActCtxSectionGuid
GetEnvironmentVariableW
RemoveDirectoryW
BaseCleanupAppcompatCache
SetEnvironmentVariableA
EnumCalendarInfoA
SetSystemPowerState
RegisterConsoleOS2
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.brdata Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE