Static task
static1
Behavioral task
behavioral1
Sample
0cbd20d7b126c0957b28b686b47f8d18_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0cbd20d7b126c0957b28b686b47f8d18_JaffaCakes118.exe
Resource
win10v2004-20240419-en
General
-
Target
0cbd20d7b126c0957b28b686b47f8d18_JaffaCakes118
-
Size
203KB
-
MD5
0cbd20d7b126c0957b28b686b47f8d18
-
SHA1
d51f22f00ef4e7630116603da9a69d98c7bc54d9
-
SHA256
64dd1bf07033f5d383c50a5550e30b033072a1a42388e62fa81a2d6a1ff87b0a
-
SHA512
7ec85c75b52a8f20e5c60cc05d8b81545a740fb99ecee71f8d86aec3edb287d3e463f0779d66234bb3cd141a765126334d9f2a4efcbbd8ae6036ce72f052c56f
-
SSDEEP
3072:/BIWFv0doMM2v70QWj7EJ6pHPcPdpy1D6u:/Xl0doV2v70QWHEJEHPcFp+D7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0cbd20d7b126c0957b28b686b47f8d18_JaffaCakes118
Files
-
0cbd20d7b126c0957b28b686b47f8d18_JaffaCakes118.exe windows:4 windows x86 arch:x86
11645a3848058ba8cd3320007072aa4d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
msvcrt
fwrite
fopen
printf
__set_app_type
_controlfp
__argc
__argv
_environ
__getmainargs
exit
_XcptFilter
_exit
_except_handler3
Sections
.text Size: 202KB - Virtual size: 202KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 352B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE