Static task
static1
Behavioral task
behavioral1
Sample
941d6cf69b0c39023fcacfd51c498afe_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
941d6cf69b0c39023fcacfd51c498afe_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
941d6cf69b0c39023fcacfd51c498afe_JaffaCakes118
-
Size
20KB
-
MD5
941d6cf69b0c39023fcacfd51c498afe
-
SHA1
444c6b20fa7fa893e88f94143b472c4d6238756b
-
SHA256
f0f00a0f8173c1c7fabb4e7e357ef366b6cbf843ad305159efef0f2cc042c66c
-
SHA512
4370c8e91abf094f6756919d87cbb1608455e75174f169c36c1ac7e5ba13c17cd1c325ac05161da970e22059de7144fff9dec21bcce62ccec4c0bb07c974c739
-
SSDEEP
384:8lsw81iS4MkhWaqHwMitgZcztpig3kay077y4lDSURsoImNRs09u:8OwxGaPAczT8349SisbyI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 941d6cf69b0c39023fcacfd51c498afe_JaffaCakes118
Files
-
941d6cf69b0c39023fcacfd51c498afe_JaffaCakes118.exe windows:4 windows x86 arch:x86
87eb14ba60ecda29587478dbddde3c4b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
strcmp
__toascii
_adj_fprem
asin
_chdir
_atodbl
kernel32
CreatePipe
FindResourceA
GetBinaryTypeA
GetCommandLineA
GetConsoleCP
GetConsoleFontSize
Sections
.text Size: 13KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE