Static task
static1
Behavioral task
behavioral1
Sample
2e33f1df1edc9f5dfc00eea456809cc1_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
2e33f1df1edc9f5dfc00eea456809cc1_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2e33f1df1edc9f5dfc00eea456809cc1_JaffaCakes118
-
Size
82KB
-
MD5
2e33f1df1edc9f5dfc00eea456809cc1
-
SHA1
9657ce987e4ef55a0d2da3fd288b519577a5f0c6
-
SHA256
59052c9e916382776c2ac9e1bdd5c26052545e1732685eb0dad96f8ac9877e86
-
SHA512
83a7afac4d193087ad525b0d97e1aeaceebe53de043686ddb41e76a5d9fa55b3276da15846a5c014c2c4e49f99a43867631631542789a39e6c6f454fc0c7d596
-
SSDEEP
1536:7wVJaZ5O4REQcklbWxAazl9XUAGxDet3P2KFJlgRPQic76a7HrJ5rV:zBqIdoWUP6QiqtXJ5rV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2e33f1df1edc9f5dfc00eea456809cc1_JaffaCakes118
Files
-
2e33f1df1edc9f5dfc00eea456809cc1_JaffaCakes118.exe windows:4 windows x86 arch:x86
dc7b23bf3b0a7749c4a92276aeed1fdb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
malloc
_initterm
__setusermatherr
fopen
__p__commode
exit
__set_app_type
fclose
_adjust_fdiv
_exit
fwrite
sin
_except_handler3
free
_acmdln
_XcptFilter
fprintf
strlen
_onexit
__getmainargs
strcmp
user32
GetDesktopWindow
kernel32
GetModuleHandleW
GetStartupInfoA
Sections
.text Size: 53KB - Virtual size: 53KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ