Static task
static1
Behavioral task
behavioral1
Sample
76423c71b4cd57d615ddc3b53cb27710_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
76423c71b4cd57d615ddc3b53cb27710_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
76423c71b4cd57d615ddc3b53cb27710_JaffaCakes118
-
Size
591KB
-
MD5
76423c71b4cd57d615ddc3b53cb27710
-
SHA1
0c4337c81e0dd6dc08538b32c868353410326747
-
SHA256
107551485fd7dc4549eb3afa150a430ef7012087ef40a974eabbb38a889fc21a
-
SHA512
67bc61e187043b20e32daba49b0f8915a8a6fc2fa6cc577e98572407954109bc77c23008525359b6a1440eb1a177864566e424367b25809b2aa735113acf25a9
-
SSDEEP
12288:LBmdrmner6LvJrjkxgFr9acuF5pJERH4b/E6u725Hmt7TmU1e8694V00euco:LgrmgSrjwgFr9aRpJEib/EV725Hmt7Td
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 76423c71b4cd57d615ddc3b53cb27710_JaffaCakes118
Files
-
76423c71b4cd57d615ddc3b53cb27710_JaffaCakes118.exe windows:4 windows x86 arch:x86
7ff7db440bf2aa20bc25906389a4744b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
_initterm
_except_handler3
_controlfp
__getmainargs
_acmdln
exit
_XcptFilter
__set_app_type
_exit
kernel32
GetModuleHandleA
GetTapeParameters
MoveFileA
CopyFileA
GetStartupInfoA
Sections
.text Size: 19KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ