Static task
static1
Behavioral task
behavioral1
Sample
8be3d0e72e21a53c89310ea548fb7ac9_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
8be3d0e72e21a53c89310ea548fb7ac9_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8be3d0e72e21a53c89310ea548fb7ac9_JaffaCakes118
-
Size
14KB
-
MD5
8be3d0e72e21a53c89310ea548fb7ac9
-
SHA1
3bfd4ef407e14793f6b0896531f0726f2ec0a518
-
SHA256
f4c78280d2b239c2f31f2fcb32030da819df4fba0b9a2fc11c8db4bac6a5b7e1
-
SHA512
0c78938e445b98567106cb548f4d395402326064d9cd1495e2fcccbf7fbec3cf670374972e6168a8fc8651e13ab090ed53fabc95a8a8854b28602804cefebc54
-
SSDEEP
192:T14uarliV6B766zkSo5qwgtQI0/FOu2l9+P/U6mod8Fh37K4feGCDHySI1lNRqn:T1uliV6B7ZzkSovI0/HMxH7XqLy7lNj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8be3d0e72e21a53c89310ea548fb7ac9_JaffaCakes118
Files
-
8be3d0e72e21a53c89310ea548fb7ac9_JaffaCakes118.exe windows:4 windows x86 arch:x86
680d493f4c1af3e5192d7627d2a41e0e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
AddAtomA
ExitProcess
FindAtomA
GetAtomNameA
SetUnhandledExceptionFilter
msvcrt
__getmainargs
__p__environ
__p__fmode
__set_app_type
_assert
_cexit
_iob
_onexit
_setmode
abort
atexit
free
malloc
memcpy
memset
signal
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 192B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 224B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 636B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE