?OptionalCircular@@YGHPADK|U
Static task
static1
Behavioral task
behavioral1
Sample
358a30fd4072e927e31c10ab4d1da774_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
358a30fd4072e927e31c10ab4d1da774_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
358a30fd4072e927e31c10ab4d1da774_JaffaCakes118
-
Size
131KB
-
MD5
358a30fd4072e927e31c10ab4d1da774
-
SHA1
5cb33875aa1f4dd98c37dad563ec7526b72fc2ca
-
SHA256
58beeef3407950a8223bd30d18937636405506529c46244c2a9fd46c3b5b9e69
-
SHA512
6786551fc5842a6faccd6ccc1c918276808ff456ff0dc6d2915f92cb973ac23b885b1744c70c25a127aed80490c1ab0759526e21281bbdf026d40385e4008013
-
SSDEEP
3072:Of0BDBz/t/9KZdihJhcO99krigl9ifUwMyBv:O8D/MieO9qrbX6v
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 358a30fd4072e927e31c10ab4d1da774_JaffaCakes118
Files
-
358a30fd4072e927e31c10ab4d1da774_JaffaCakes118.exe windows:5 windows x86 arch:x86
c32a96c61676ad750756d07c88bbf9a0
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
atoi
kernel32
LoadLibraryA
GetModuleHandleA
lstrlenA
LoadLibraryExW
user32
wsprintfA
shlwapi
PathIsPrefixW
Exports
Exports
Sections
.text Size: 23KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 107KB - Virtual size: 167KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE