Static task
static1
Behavioral task
behavioral1
Sample
61d75dd84964529efe56ca82db6f19d1_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
61d75dd84964529efe56ca82db6f19d1_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
61d75dd84964529efe56ca82db6f19d1_JaffaCakes118
-
Size
88KB
-
MD5
61d75dd84964529efe56ca82db6f19d1
-
SHA1
9f3404f5de2c8d9ec66cc10d3474fc4a4b7d2fa1
-
SHA256
ff982aab293d4de9aa037d0ccccb669e1ec4f86e06d421191178bfe5da08720a
-
SHA512
42c05a49ab90ab005412038cdc66e14d25233c775e6cc08d5e4eeabc87a3ca2ee2d401989fd41303d0ea55b7bc4f188e47d98574dd7e221b827f8a63c0a26ee0
-
SSDEEP
1536:xIFNl6DeCLGVGiPdo61zokAp6ZAand1RsuswixK+2RDhqaySnJIZqSnovv4zR6:ynlwa9o61cuf9Ha2lhJv1Cki
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 61d75dd84964529efe56ca82db6f19d1_JaffaCakes118
Files
-
61d75dd84964529efe56ca82db6f19d1_JaffaCakes118.exe windows:5 windows x86 arch:x86
4711043295f23dcd88dbddbd77b89176
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
_acmdln
_exit
_onexit
strcmp
malloc
sin
free
strlen
__getmainargs
fread
_XcptFilter
__set_app_type
exit
fwrite
_except_handler3
__setusermatherr
fclose
printf
fopen
_adjust_fdiv
_initterm
fseek
kernel32
GetModuleHandleW
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 556B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 46KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 38KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ