Static task
static1
Behavioral task
behavioral1
Sample
8abe288665bd08b148fec7d4c68c7ad6_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
8abe288665bd08b148fec7d4c68c7ad6_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8abe288665bd08b148fec7d4c68c7ad6_JaffaCakes118
-
Size
74KB
-
MD5
8abe288665bd08b148fec7d4c68c7ad6
-
SHA1
c3f7e7bbc4ce751ec976fd3971d33bcca8f88659
-
SHA256
f3fac68157b92ac27c2547b898e0b4fcd430f9d3a24778de1800f88655aedbc3
-
SHA512
54f3933694e7d691161b0c59a7436f1fa525479364ef0419b98c1a65af64dcd875cface7254507001f0b04af1f4b04e15bfc19653c7e604be1cef67ba2336a63
-
SSDEEP
1536:w0+UfjDLXqP+AWRRK71FAXFHhablga9f3Gg6A95T5VPOBwfHL:jQkE1FA1Hhelga9fW8nT55Kwfr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8abe288665bd08b148fec7d4c68c7ad6_JaffaCakes118
Files
-
8abe288665bd08b148fec7d4c68c7ad6_JaffaCakes118.exe windows:5 windows x86 arch:x86
ccfdad0a5bc812412b26b64efaa09bad
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
strcmp
free
_adjust_fdiv
malloc
fclose
_except_handler3
__set_app_type
_onexit
strlen
_initterm
fprintf
_vsnprintf
_exit
fopen
__setusermatherr
_snprintf
_acmdln
__getmainargs
__p__commode
fwrite
exit
_XcptFilter
sin
user32
GetDesktopWindow
kernel32
GetStartupInfoA
GetModuleHandleW
Sections
.text Size: 57KB - Virtual size: 57KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ