Static task
static1
Behavioral task
behavioral1
Sample
71dca4d1ce663d278de7190dc81db144_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
71dca4d1ce663d278de7190dc81db144_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
71dca4d1ce663d278de7190dc81db144_JaffaCakes118
-
Size
60KB
-
MD5
71dca4d1ce663d278de7190dc81db144
-
SHA1
4271f8cedd37536c38e99599d5f06a51c285369f
-
SHA256
824ab929b8e8961be30be958b4187530b8a03dc8d3f073cded14fecf6e9f85f6
-
SHA512
f2269a59392b3f145e952698260c4e2418f3796006dcc57992a9734cc4b4d015b7c84a12ddb415af20cb91f320e9ba16992884c6c21b66c5aaa8d6306a79b419
-
SSDEEP
384:6y3EY8QVtjCf0yvlNse/JVzEs/4gdR3gmWm1y+kJIzK6YBf:6yN8QVtjCnvckPzE8BgmWiiH6YB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 71dca4d1ce663d278de7190dc81db144_JaffaCakes118
Files
-
71dca4d1ce663d278de7190dc81db144_JaffaCakes118.exe windows:4 windows x86 arch:x86
d106aaf7e24f1efdd7d6308fbc085529
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
AddAtomA
ExitProcess
FindAtomA
GetAtomNameA
GetFileSize
GetModuleHandleA
GetProcAddress
OpenProcess
ResumeThread
SetThreadContext
SetUnhandledExceptionFilter
VirtualFree
VirtualProtect
VirtualQuery
msvcrt
__getmainargs
__p__environ
__p__fmode
__set_app_type
_assert
_cexit
_iob
_onexit
_setmode
abort
atexit
exit
fgetc
fopen
free
malloc
memcpy
signal
user32
LoadIconA
Sections
.text Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE