Static task
static1
Behavioral task
behavioral1
Sample
2a27ad747e27e9d34f35b9d0225d40b0_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2a27ad747e27e9d34f35b9d0225d40b0_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2a27ad747e27e9d34f35b9d0225d40b0_JaffaCakes118
-
Size
80KB
-
MD5
2a27ad747e27e9d34f35b9d0225d40b0
-
SHA1
8abdd0d7a49796a53d9f98a9ebedf0410ed656d0
-
SHA256
42ba10d33dcf1f0089a4de2fa7038e7f709147f35e8a860ecd801ea61aafb73d
-
SHA512
ec28c75cb6ae970c383d1564a6e8879df558d881bad391330aa01cb34f8f760d3d2a86da1dc34741e82a29528b0c1c2108acaa26333335b2ae14644cdf2e5906
-
SSDEEP
1536:mIErCaljHQFDii+Pf2dBrchcMUBWF9yDiVw9YmB4:IrjwFii6f2v1Of7w9YmB4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2a27ad747e27e9d34f35b9d0225d40b0_JaffaCakes118
Files
-
2a27ad747e27e9d34f35b9d0225d40b0_JaffaCakes118.exe windows:5 windows x86 arch:x86
6b5fb9b35e3d77ce936f8a618ff75df6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
__setusermatherr
_adjust_fdiv
getenv
fprintf
sin
fclose
free
fputc
sprintf
_except_handler3
__set_app_type
__p__commode
strcpy
_onexit
__dllonexit
_acmdln
fwrite
fopen
_stricmp
_setmode
exit
_XcptFilter
strcmp
malloc
_exit
__getmainargs
atoi
strlen
_initterm
user32
GetDesktopWindow
kernel32
GetStartupInfoA
GetModuleHandleW
Sections
.text Size: 53KB - Virtual size: 53KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ