Static task
static1
Behavioral task
behavioral1
Sample
73c19ac3595e7346a558b56827da6625_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
73c19ac3595e7346a558b56827da6625_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
73c19ac3595e7346a558b56827da6625_JaffaCakes118
-
Size
35KB
-
MD5
73c19ac3595e7346a558b56827da6625
-
SHA1
745fbd32946d9f4c6a9b8793229d89fcaad09778
-
SHA256
f42bf440c8225b9cd3d7304cc32847c2e64b8e879264ece7d071d365a24406ab
-
SHA512
07cea9b30bdc9a31dbd11fc162d1f1ee045edf4394b7b011afe70960ba1d548f1832da98d8c2901141092fc10efef2c77b68c3334ff083a27a37bd06a1a505c6
-
SSDEEP
384:VMqZ8n2s1nhp5L3RcDvuzhXvgEOAdE/LX3TW9WM0z1ihK9Fm+At2Eb:iqZ8n2O4vuzVOAW/LX3TUWLieFm+Anb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 73c19ac3595e7346a558b56827da6625_JaffaCakes118
Files
-
73c19ac3595e7346a558b56827da6625_JaffaCakes118.exe windows:4 windows x86 arch:x86
1d73c27b7fa0db7fe2ab08f7a3bffc60
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
MessageBoxA
msvcrt
strcat
memset
??3@YAXPAX@Z
__CxxFrameHandler
??2@YAPAXI@Z
__dllonexit
_onexit
_exit
_XcptFilter
memcpy
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
exit
kernel32
GetStartupInfoA
GetModuleHandleA
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 874B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 596B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ