Static task
static1
Behavioral task
behavioral1
Sample
8dcec2d6fa8e18ad20d2948d4d6042e7_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
8dcec2d6fa8e18ad20d2948d4d6042e7_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8dcec2d6fa8e18ad20d2948d4d6042e7_JaffaCakes118
-
Size
46KB
-
MD5
8dcec2d6fa8e18ad20d2948d4d6042e7
-
SHA1
5a872b954f02339bebc6f0cf0783ac7c6b0a491b
-
SHA256
ca3ca808d14542f7c1f4553cd4546ef63df5cd97f700201db7f9b7ddd95e34f4
-
SHA512
d8be8a217cef544b68ed1b13122d996bc57c75ee824276a738283d19a78472f804d96c52d8b6fc7d5435a86e5b7144fdb6ed1147f45e69b89b160ac358bb477d
-
SSDEEP
384:WH+WAMW0LJI0MSBO6grIGem6HLcdWT/aaO/NiH3WLOYLOcbuPlOBVA4n2Ntet:igSbMn6grc3LcdW++HmLjCZPlbpf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8dcec2d6fa8e18ad20d2948d4d6042e7_JaffaCakes118
Files
-
8dcec2d6fa8e18ad20d2948d4d6042e7_JaffaCakes118.exe windows:5 windows x86 arch:x86
866559c5e96c7228dcb543b5e8a7c37a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
__initenv
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
exit
__set_app_type
_controlfp
_except_handler3
_cexit
_XcptFilter
_exit
__p__fmode
_c_exit
kernel32
GetModuleHandleA
GetCommandLineW
loadperf
UnloadPerfCounterTextStringsW
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 43KB - Virtual size: 65KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE