Static task
static1
Behavioral task
behavioral1
Sample
103fc1dac00ef266f7e6c1098eaf3b0a_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
103fc1dac00ef266f7e6c1098eaf3b0a_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
103fc1dac00ef266f7e6c1098eaf3b0a_JaffaCakes118
-
Size
82KB
-
MD5
103fc1dac00ef266f7e6c1098eaf3b0a
-
SHA1
9a4f2eabec565f1b31f7dc7e928f0fe566a735d1
-
SHA256
04e67c008fef839ccabd0ac1badd98a1170f7d00eb2094b31e62c0ff524a52f5
-
SHA512
e00e966b229cf944d51bd5bfe2995f8ed1aa92c27056b431817bf3d8025ed5f69bfa937bb2712c77d51365f6af06fb99f42fa5becf80824a77f3f4073470fc6a
-
SSDEEP
1536:cSOSWL3xwEQq7sKNZ1FSeBTakDdMISoPhnG5w49q5mdcf2T6OyUi:cjS+xwHe/TziIdhnaz9vZ6tUi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 103fc1dac00ef266f7e6c1098eaf3b0a_JaffaCakes118
Files
-
103fc1dac00ef266f7e6c1098eaf3b0a_JaffaCakes118.exe windows:5 windows x86 arch:x86
64bf10746234cf35939d59c36033ae75
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
strcmp
_exit
__getmainargs
_XcptFilter
_adjust_fdiv
fprintf
fopen
_snprintf
_onexit
free
exit
strlen
getenv
sin
__set_app_type
_acmdln
malloc
_except_handler3
fwrite
_initterm
__p__commode
fclose
__setusermatherr
__p__environ
user32
GetDesktopWindow
kernel32
GetModuleHandleW
GetStartupInfoA
Sections
.text Size: 54KB - Virtual size: 54KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ