Static task
static1
Behavioral task
behavioral1
Sample
fbd7bc53afdc96e11f24ac0658919064_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
fbd7bc53afdc96e11f24ac0658919064_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
fbd7bc53afdc96e11f24ac0658919064_JaffaCakes118
-
Size
22KB
-
MD5
fbd7bc53afdc96e11f24ac0658919064
-
SHA1
d810c24a8bedb05f6ee88ea04e3c661ae10fdb65
-
SHA256
b45bad00e3892e6d98b0e286180a556525c53fadc15b4c780e2495f03a0d8911
-
SHA512
a9eb2418b8f2700ac4195344f7a2ea591cb86928b240d2b66ea5fee3a9d8b9dcc7f4a36de1c3af63477a88399868d86b0c975a036a00118737d1127dc348d661
-
SSDEEP
384:jdR7hPB79rohONM1JrVxCHv4Vy7P40M33nn33nn33nn33nn33nn33nn33nn33nnF:jdR7/7e8u1SvQyjTMnnnnnnnnnnnnnnF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fbd7bc53afdc96e11f24ac0658919064_JaffaCakes118
Files
-
fbd7bc53afdc96e11f24ac0658919064_JaffaCakes118.exe windows:4 windows x86 arch:x86
53aacb7513c2e9539ae1be89df34af77
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
iswpunct
labs
localeconv
malloc
memchr
memset
perror
puts
putwchar
Sections
.DATA Size: 15KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tlss Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.DATA Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.NewIT Size: 512B - Virtual size: 216B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE