Static task
static1
Behavioral task
behavioral1
Sample
34182629bd92af987eba1bf314c9b54c_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
34182629bd92af987eba1bf314c9b54c_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
34182629bd92af987eba1bf314c9b54c_JaffaCakes118
-
Size
475KB
-
MD5
34182629bd92af987eba1bf314c9b54c
-
SHA1
8bdd8b23528c05f98f753897f5502c6400bae5ed
-
SHA256
261f336d68181fdd23520d5cee033f849019bd955e9e4472ef4d51d69d5e30ae
-
SHA512
ae85ad3779ac44cc8cc5ccd005d8d0a7e957347701e6eeec039e196bd1cc62214347ea4f152ee766028338192a369738e2456121c4be139c7bf0be3dbf7c7567
-
SSDEEP
12288:8Cv5oSvBQoSZyu+HmPa2oSA8u6oSe+oSWjoSIoShNdVzBoSKRoS8oSoMu:8wD5HghuvbANdVKZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 34182629bd92af987eba1bf314c9b54c_JaffaCakes118
Files
-
34182629bd92af987eba1bf314c9b54c_JaffaCakes118.exe windows:4 windows x86 arch:x86
8c6f8b8c4bbac918de21326997af39aa
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
fclose
fputs
fopen
_exit
_XcptFilter
exit
__p___initenv
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
Sections
.text Size: 4KB - Virtual size: 396B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 422B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 172B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE