?ViewAssist@TRFDJE=L
Static task
static1
Behavioral task
behavioral1
Sample
8a1660d3b156324635b2a478907cc157_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
8a1660d3b156324635b2a478907cc157_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8a1660d3b156324635b2a478907cc157_JaffaCakes118
-
Size
173KB
-
MD5
8a1660d3b156324635b2a478907cc157
-
SHA1
af432faa3ea2daff70a0b81d0f5060b44d4f524b
-
SHA256
d1088d80e7f2ed5620bfcc8e847c20a9be4f59a1529581e1f881d0c0283bd528
-
SHA512
77df44e0aad388c2e32a483d3ebb88ed6feaa6a8a3d3170d0cf6fc77412a170d5f5a8dacca5b6894a06d44d721546f372454dd09f4fcba181bad31778fbf7ac1
-
SSDEEP
3072:XxuzC9Fkzh5vlCkc+ZeJOTBimCWu1pdpnCMkD:UC9uzLlNc+ZHBP7u1pdpCMkD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8a1660d3b156324635b2a478907cc157_JaffaCakes118
Files
-
8a1660d3b156324635b2a478907cc157_JaffaCakes118.exe windows:5 windows x86 arch:x86
92179ef69e1f649be00b69cbfc03bf48
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
IntlStrEqWorkerW
PathCompactPathExW
kernel32
GetTickCount
lstrcmpiW
LoadLibraryA
GetModuleHandleW
Exports
Exports
Sections
.text Size: 24KB - Virtual size: 215KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 343B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 144KB - Virtual size: 144KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 608B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ