Static task
static1
Behavioral task
behavioral1
Sample
571b8b0007640453d22e1c86471ba9a9_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
571b8b0007640453d22e1c86471ba9a9_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
571b8b0007640453d22e1c86471ba9a9_JaffaCakes118
-
Size
76KB
-
MD5
571b8b0007640453d22e1c86471ba9a9
-
SHA1
28fbb94db39f291cef0e3eff1faa0d67d40823c1
-
SHA256
eef83358be8c2b33c4cff28776e2346fb6bb14b753cdaca0aeb99abb9676718c
-
SHA512
4d23e1d01d8371d7bef7505ec90021674128cd0058f113c949ad4ef37ec04e69d21e0c82bc5509e8e2de7c530d20fdb4047d1afeba644eacc0cce51f5a423488
-
SSDEEP
1536:+ljaaaabHG4fs9pEeFonQocY7+pVBqbE6pjVrs2ryrd1vUQuq6:oXGEOee6T4VQbE6Hs2qo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 571b8b0007640453d22e1c86471ba9a9_JaffaCakes118
Files
-
571b8b0007640453d22e1c86471ba9a9_JaffaCakes118.exe windows:4 windows x86 arch:x86
41a90fdc696fa83e59a584fd428569d8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetTermsrvAppInstallMode
_llseek
CreateTimerQueueTimer
RestoreLastError
SetLocalPrimaryComputerNameA
SetConsoleInputExeNameA
DeviceIoControl
GetCurrentThreadId
EnumTimeFormatsA
Beep
CheckRemoteDebuggerPresent
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.brdata Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE