Static task
static1
Behavioral task
behavioral1
Sample
2ead11cc6da335f45a447b441a413425_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2ead11cc6da335f45a447b441a413425_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2ead11cc6da335f45a447b441a413425_JaffaCakes118
-
Size
76KB
-
MD5
2ead11cc6da335f45a447b441a413425
-
SHA1
2f76338dfda370e893b23195ad4eb3ff1922ecb2
-
SHA256
e30b0d04e33587bbc27a58922c56a100cec6eab85676218f21e8324d53beeae2
-
SHA512
57f740d69fd3fceccb0bdb2a788be7f9774e591699d6a9628333cc9214152474354292ce09b3d0677ad657917d9692e756796db97d300582f54c6b06e81e3687
-
SSDEEP
1536:e0yvXGz1qdfZeO5gfsWOt7pQ1I2esY1qTLh866pxXOxxIQrPPS+HzXlDOvH:eD2gzgrk7pQWXqTLR6POxxIQLndOvH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2ead11cc6da335f45a447b441a413425_JaffaCakes118
Files
-
2ead11cc6da335f45a447b441a413425_JaffaCakes118.exe windows:4 windows x86 arch:x86
61861c82730327ed1eb24fb15834059a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
abort
_cexit
fclose
fopen
_initterm
_exit
free
_adjust_fdiv
strlen
_onexit
sin
malloc
__p__commode
fputs
__setusermatherr
exit
strcmp
_iob
_except_handler3
__getmainargs
_acmdln
_XcptFilter
fprintf
__set_app_type
_snprintf
fwrite
user32
GetDesktopWindow
kernel32
GetModuleHandleW
GetStartupInfoA
Sections
.text Size: 50KB - Virtual size: 49KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ