Static task
static1
Behavioral task
behavioral1
Sample
5448f146df243666ed5b6658182559fd_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
5448f146df243666ed5b6658182559fd_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
5448f146df243666ed5b6658182559fd_JaffaCakes118
-
Size
83KB
-
MD5
5448f146df243666ed5b6658182559fd
-
SHA1
34bb143e9cb38c99260f82651002d4a785b4fc11
-
SHA256
a21aada11a22b144c8110b589de88c0f5879f142bfb04c5e8c37768bbaea05b8
-
SHA512
0b67ca8425fa98080825f589a4ec3f881691e749369b5860aaae4aef347c53202b47812a932c4cd19869a086549f193cb9c75e791bed34cd0cfc2edc2a075ec7
-
SSDEEP
1536:gjfp62QsAbcdGxr5nB6p2rAk7io1GD6H3pjVrs2ryrd1vUQuqwcizSkX:gjf7dAbXxr1B6ud71C6H3Hs2quciu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5448f146df243666ed5b6658182559fd_JaffaCakes118
Files
-
5448f146df243666ed5b6658182559fd_JaffaCakes118.exe windows:4 windows x86 arch:x86
97d0bfcd725bf01bdd7d24c090d856c8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
IsValidLocale
GetExpandedNameA
SetCommBreak
GetVDMCurrentDirectories
DosDateTimeToFileTime
SearchPathW
UnregisterConsoleIME
GetProcAddress
UnmapViewOfFile
IsBadCodePtr
GetGeoInfoW
EnumCalendarInfoExA
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.brdata Size: 27KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE