Static task
static1
Behavioral task
behavioral1
Sample
5ed3c259f30cefeb46ef3c8f852c08f6_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5ed3c259f30cefeb46ef3c8f852c08f6_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5ed3c259f30cefeb46ef3c8f852c08f6_JaffaCakes118
-
Size
92KB
-
MD5
5ed3c259f30cefeb46ef3c8f852c08f6
-
SHA1
b4f69f862338acb1f40fa7a62eb9d6dc4e6700ac
-
SHA256
85374b33456de9a1da631fa085d10d40f7f4c16fb14628a180a804e1e0f027fe
-
SHA512
70cb9ac6d4dcfaf9bc370fc90a53c00916fa659d73f0fe135d9e366e59efdf12b1a012dc87cab3af96dedb6ed0190486f37dda3879149f7f0b7af85933b39ece
-
SSDEEP
1536:YYSHqwGJ7w+BQJ/xzXP1h1pKVd986TJ9ZvshwY6q8Ta8bze9CA9Q/MTY:YYSHqwWl8z/1h1udL9ZQwjq4C9CA9Q0T
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5ed3c259f30cefeb46ef3c8f852c08f6_JaffaCakes118
Files
-
5ed3c259f30cefeb46ef3c8f852c08f6_JaffaCakes118.exe windows:4 windows x86 arch:x86
ac37d1368a2aa0a6402f06ef7d97218d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
malloc
__setusermatherr
_initterm
_exit
free
fwrite
__getmainargs
_onexit
__set_app_type
fseek
fclose
printf
exit
_adjust_fdiv
fopen
fread
_except_handler3
sin
_XcptFilter
strlen
strcmp
_acmdln
kernel32
GetModuleHandleW
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 556B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 46KB - Virtual size: 62KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ